rapid7/metasploit-framework — pull request #1144 by wchen-r7 (2012-12-08 05:19:59+00:00)
Title: Add Nagios XI Network Monitor Graph Explorer Exploit

This module exploits a vulnerability found in Nagios XI Network Monitor's component 'Graph Explorer'. An authenticated user can execute system commands by injecting it in several parameters, such as in visApi.php's 'host' parameter, which results in remote code execution.

Please note: Graph Explorer is a commercial-only component. So I had to rely on 3rd party for testing.