EIP-2026-109819
PRE-CVENagios Incident Manager 2.0.0 - Multiple Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-109819. PoCs published by Security-Assessment.com.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in Nagios Incident Manager <= 2.0.0, including command injection, SQL injection, and stored XSS. The command injection allows remote code execution as the 'apache' user via crafted GET requests, while SQL injection and XSS are also detailed with specific payloads.
Description
Nagios Incident Manager 2.0.0 - Multiple Vulnerabilities
Exploits (1)
This exploit demonstrates multiple vulnerabilities in Nagios Incident Manager <= 2.0.0, including command injection, SQL injection, and stored XSS. The command injection allows remote code execution as the 'apache' user via crafted GET requests, while SQL injection and XSS are also detailed with specific payloads.