{"uuid": "c7611b86-b6e0-4780-a516-1fed9638e298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10029", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/nagios_graph_explorer.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Daniel Compton \", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Nagios XI Network Monitor's\\n          component 'Graph Explorer'.  An authenticated user can execute system commands\\n          by injecting it in several parameters, such as in visApi.php's 'host' parameter,\\n          which results in remote code execution.\", \"disclosure_date\": \"2012-11-30\", \"fullname\": \"exploit/unix/webapp/nagios_graph_explorer\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Nagios XI Network Monitor Graph Explorer Component Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/nagios_graph_explorer.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"unix/webapp/nagios_graph_explorer\", \"references\": [\"CVE-2012-10029\", \"OSVDB-83552\", \"BID-54263\", \"PACKETSTORM-118497\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Graph Explorer Component prior to 1.3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:44.504470Z"}