CVE-2018-19311

Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...

CVE-2018-19312

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...

CVE-2018-19312

CVE-2018-19312 affects Centreon 3.4.x, with the vulnerability exposed via the searchVM parameter to the main.php?p=20408 URI. The issue is a SQL Injection flaw in Centreon 3.4.x, and a fixed version exists: Centreon 18.10.0 and Centreon web 2.8.24. The connected documents consistently describe th...

CVE-2018-19311

Centreon 3.4.x is vulnerable to a cross-site scripting (XSS) flaw triggered via the Service field when accessing main.php?p=20201 (e.g., in Monitoring > Status Details > Services). The issue is fixed in Centreon 18.10.0. Affected component: the web UI Service field handling; root cause info...

PT-2018-14913

Name of the Vulnerable Software and Affected Versions Centreon versions 3.4.x Description The issue allows SQL Injection via the searchVM parameter to the "/main.php?p=20408" API endpoint. Recommendations For Centreon versions 3.4.x, update to Centreon 18.10.0 or Centreon web 2.8.24 to resolve th...

PT-2018-14912

Name of the Vulnerable Software and Affected Versions Centreon versions 3.4.x through 18.09.x Description The issue allows for XSS via the Service field to the "main.php?p=20201" URI, as demonstrated by the "Monitoring Status Details Services" screen. Recommendations For Centreon versions 3.4.x...

CVE-2018-19311: Improper Neutralization of Input During Web Page Generation

Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...

CVE-2018-19312: Improper Neutralization of Special Elements used in an SQL Command

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...

Centreon SQL Injection Vulnerability

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A SQL injection...

Centreon Cross-Site Scripting Vulnerability (CNVD-2019-00831)

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A cross-site scripting...

CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

CVE-2018-19281

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

CVE-2018-19281

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

Design/Logic Flaw

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

Sql injection

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

CVE-2018-19281

CVE-2018-19281 affects Centreon 3.4.x and is resolved in Centreon 18.10.0 and Centreon Web 2.8.27. The vulnerability is described as a SQL injection via SNMP trap, indicating that untrusted data from SNMP traps could be used to manipulate the backend database. Publicly provided connected document...

CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

CVE-2018-19281

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...