CVE-2018-19312: Improper Neutralization of Special Elements used in an SQL Command

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...

PT-2018-14913

Name of the Vulnerable Software and Affected Versions Centreon versions 3.4.x Description The issue allows SQL Injection via the searchVM parameter to the "/main.php?p=20408" API endpoint. Recommendations For Centreon versions 3.4.x, update to Centreon 18.10.0 or Centreon web 2.8.24 to resolve th...