CVE-2020-5791

This exploit targets a command injection vulnerability in Nagios XI 5.7.3 via the 'mibs.php' file. It authenticates with provided credentials and injects a reverse shell payload to establish a connection to an attacker-controlled host.

This Metasploit module scans Nagios XI installations to detect their version and suggests matching exploit modules based on the version number. It supports both authenticated and unauthenticated checks, with authenticated checks requiring valid credentials.

This Metasploit module exploits CVE-2020-5791, an authenticated OS command injection vulnerability in Nagios XI's `admin/mibs.php`. It allows an authenticated admin user to execute arbitrary commands as the `apache` or `www-data` user on vulnerable versions (5.6.0 to 5.7.3).