SQL injection in Centreon

2020-02-1120:36:04

Google

osv.dev

0.002 Low

EPSS

Percentile

54.7%

JSON

SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php.

CPENameOperatorVersion
centreon/centreoneq2.99.4
centreon/centreoneq2.7.3
centreon/centreoneq19.04.4
centreon/centreoneq2.99.3
centreon/centreoneq18.10.6
centreon/centreoneq18.10.7
centreon/centreoneq2.99.2
centreon/centreoneq2.99.1
centreon/centreoneq2.99.5
centreon/centreoneq19.04.2

Name	Operator	Version
centreon/centreon	eq	2.99.4
centreon/centreon	eq	2.7.3
centreon/centreon	eq	19.04.4
centreon/centreon	eq	2.99.3
centreon/centreon	eq	18.10.6
centreon/centreon	eq	18.10.7
centreon/centreon	eq	2.99.2
centreon/centreon	eq	2.99.1
centreon/centreon	eq	2.99.5
centreon/centreon	eq	19.04.2