Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-103999. PoCs published by Adam Baldwin.
AI-analyzed exploit summary The exploit demonstrates an SQL injection vulnerability in Nagios XI's admin/users.php page, allowing an attacker to extract user passwords by manipulating the 'records' parameter. The payload uses CHR concatenation to bypass basic filters and retrieve the password for the 'nagiosadmin' user.
Description
Nagios XI - 'users.php' SQL Injection
Exploits (1)
The exploit demonstrates an SQL injection vulnerability in Nagios XI's admin/users.php page, allowing an attacker to extract user passwords by manipulating the 'records' parameter. The payload uses CHR concatenation to bypass basic filters and retrieve the password for the 'nagiosadmin' user.