France Ties Russia's Sandworm to a Multiyear Hacking Spree

A French security agency warns that the destructively minded group has exploited an IT monitoring tool from Centreon...

CVE-2020-22425

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution...

Sql injection

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution...

UBUNTU-CVE-2020-22425

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution...

CVE-2020-22425

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution...

CVE-2020-22425

CVE-2020-22425 affects Centreon 19.10-3.el7. The vulnerability is a SQL injection that an authenticated user can leverage to inject additional SQL queries and perform remote command execution. The available data list CVSS v3.1 base score 8.8 (Network, Privileges Low, User Interaction None, Scope ...

Centreon SQL注入漏洞

Centreon is a free and open source IT and application monitoring software. A SQL injection vulnerability exists in Centreon 19.10-3.el7. An attacker can exploit this vulnerability to inject SQL queries, which can be used for remote command execution...

PT-2021-10763

Name of the Vulnerable Software and Affected Versions Centreon version 19.10-3.el7 Description The issue allows an authorized user to inject additional SQL queries, potentially leading to remote command execution. Recommendations For Centreon version 19.10-3.el7, at the moment, there is no...

CVE-2020-22425: Improper Neutralization of Special Elements used in an SQL Command

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution...

Centreon RRDdatabase_status_path Command Injection (CVE-2020-13252; CVE-2020-22345)

A command injection vulnerability exists in the Centreon Web Application. The vulnerability is due to improper validation of the RRDdatabasestatuspath parameter in an HTTP request...

Information Disclosure

centreon/centreon is vulnerable to information disclosure. The session ID is found to be within the server response body, potentially allowing an attacker to obtain the session ID through another vulnerability such as cross-site scripting...

Centreon Information Disclosure Vulnerability (CNVD-2020-31118)

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A security vulnerability exists in Centreon versions prior to 19.10.7, which is caused...

Centreon host-monitoring widget, service-monitoring widget and tactical-overview widget cross-site scripting vulnerabilities (CNVD-2021-28003)

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon. The product mainly provides monitoring of network , system and application resources . host-monitoring widget is one of the host monitoring widget . service-monitoring widget is one of the...

Centreon host-monitoring widget, service-monitoring widget and tactical-overview widget cross-site scripting vulnerabilities (CNVD-2021-28002)

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon. The product mainly provides monitoring of network , system and application resources . host-monitoring widget is one of the host monitoring widget . service-monitoring widget is one of the...

Centreon host-monitoring widget, service-monitoring widget and tactical-overview widget cross-site scripting vulnerabilities

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon. The product mainly provides monitoring of network , system and application resources . host-monitoring widget is one of the host monitoring widget . service-monitoring widget is one of the...

CVE-2020-13628

Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...

CVE-2020-13627

Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitoring/src/index.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...

CVE-2020-10946

Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...

CVE-2020-10945

Centreon before 19.10.7 exposes Session IDs in server responses...

CVE-2020-13627

Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitoring/src/index.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...