EIP-2026-109827

This exploit demonstrates a blind SQL injection vulnerability in Nagios XI 5.7.3 via the 'id' parameter in the 'Manage Users' functionality. The PoC uses a time-based SQL injection payload to confirm the vulnerability.