CVE-2018-8735
HIGHNagios XI 5.2.0-5.4.12 - Remote Code Execution via OS Command Injection
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2018-8735.
PoCs published by Metasploit, Jared Arave, Cale Smith, Benny Husted, Jared Arave, including Metasploit module exploits/linux/http/nagios_xi_chained_rce_2_electric_boogaloo.
AI-analyzed exploit summary This Metasploit module exploits multiple vulnerabilities in Nagios XI (CVE-2018-8733, CVE-2018-8734, CVE-2018-8735, CVE-2018-8736) to achieve remote root access via SQL injection, API key enumeration, and command injection.
Description
Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection.
Exploits (4)
This Metasploit module exploits multiple vulnerabilities in Nagios XI (CVE-2018-8733, CVE-2018-8734, CVE-2018-8735, CVE-2018-8736) to achieve remote root access via SQL injection, API key enumeration, and command injection.
This exploit chains multiple vulnerabilities (CVE-2018-8733, CVE-2018-8734, CVE-2018-8735, CVE-2018-8736) in Nagios XI to achieve remote root access. It starts by changing the database user to root, extracts API keys via SQL injection, adds an administrative user, and executes a reverse shell or custom command.
This Metasploit module exploits a chain of vulnerabilities in Nagios XI (CVE-2018-8735) to achieve remote root access. It combines SQL injection, API key enumeration, and command injection to add an admin user and execute arbitrary commands.
This Metasploit module exploits a chain of vulnerabilities (SQLi, auth bypass, file upload, command injection, and privilege escalation) in Nagios XI <= 5.2.7 to achieve remote code execution as root. It automates the entire exploit chain, from stealing an API token to uploading a malicious payload and executing it.
References (6)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H