CVE-2020-5791

Related Files

Nagios XI 5.7.3 Remote Code Execution

Posted Apr 19, 2021

Authored by Chris Lyne, Matthew Aberegg, Erik Wynter | Site metasploit.com

This Metasploit module exploits CVE-2020-5791, an OS command injection vulnerability on Nagios XI versions 5.6.0 through 5.7.3 in admin/mibs.php that enables an authenticated user with admin privileges to achieve remote code execution as either the apache user or the www-data user.

tags | exploit, remote, php, code execution

advisories | CVE-2020-5791

SHA-256 | 5f3ec659fe836f33c81a4956f9541aeece789fd3ec657e3f2f83dc70252319dc

Download | Favorite | View

Nagios XI 5.7.3 Remote Command Injection

Posted Oct 28, 2020

Authored by Chris Lyne, Matthew Aberegg

Nagios XI version 5.7.3 mibs.php remote command injection exploit.

tags | exploit, remote, php

advisories | CVE-2020-5791

SHA-256 | 6855f4caf30f9e7751d6594a73e43b55ca31b7b9ddebeacdfa7108721c29da09

Download | Favorite | View