CVE-2013-6875: Nagios XI

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php.

Affected products

• Nagios Nagios XI: up to and including 2012r2.3; version 2012 only; version 2012r1.0 only; version 2012r1.1 only; version 2012r1.2 only; version 2012r1.3 only; …

Published 2013-11-26. Last modified 2026-06-17.