CVE-2012-5967

2012-12-1911:00:00

certcc

www.cve.org

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.2%

JSON

SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via the menu parameter.

CNA Affected

[
  {
    "product": "Centreon",
    "vendor": "Centreon",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.3 through 2.3.9-4"
      }
    ]
  },
  {
    "product": "Centreon web",
    "vendor": "Centreon",
    "versions": [
      {
        "status": "affected",
        "version": "fixed in 2.6.0"
      }
    ]
  }
]