Lucene search
MitreCVELIST:CVE-2015-1561HistoryJul 14, 2015 - 4:00 p.m.
CVE-2015-1561
2015-07-1416:00:00
mitre
raw.githubusercontent.com
1
The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ns_id parameter.
Related
cve
cve
CVE-2015-1561
2015-07-14 16:59:00
github
github
Centreon Command Injection
2022-05-14 00:55:18
osv
osv
Centreon Command Injection
2022-05-14 00:55:18
prion
prion
Code injection
2015-07-14 16:59:00
zdt
zdt
Centreon 2.5.4 - Multiple Vulnerabilities
2015-07-08 00:00:00
exploitpack
exploitpack
Centreon 2.5.4 - Multiple Vulnerabilities
2015-07-08 00:00:00
packetstorm
packetstorm
Merethis Centreon 2.5.4 SQL Injection / Remote Command Execution
2015-07-08 00:00:00
securityvulns
securityvulns
openvas
openvas
Centreon Multiple Vulnerabilities (Sep 2015)
2015-09-08 00:00:00
exploitdb
exploitdb
Centreon 2.5.4 - Multiple Vulnerabilities
2015-07-08 00:00:00