CVE-2011-4432

www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

CVE-2011-4431

Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. dot dot in the commandname parameter...

CVE-2011-4432

www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

CVE-2011-4431

Centreon before 2.3.2 is affected by a directory traversal vulnerability in main.php where the command_name parameter is not properly validated. This allows remote authenticated users to execute arbitrary commands via a .. (dot dot) path traversal sequence. The issue arises from insufficient inpu...

CVE-2011-4432

CVE-2011-4432 affects Merethis Centreon prior to 2.3.2. The vulnerability is that the password hashing routine does not use a salt, making it easier for context-dependent attackers to recover plaintext passwords via rainbow tables. The available sources confirm this specific insecure credential h...

PT-2011-4949

Name of the Vulnerable Software and Affected Versions Merethis Centreon versions prior to 2.3.2 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by exploiting a directory traversal vulnerability in the main.php file. The vulnerability can be...

CVE-2011-4431: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. dot dot in the commandname parameter...

CVE-2011-4432: Undefined Security Weakness

www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

PT-2011-4950

Name of the Vulnerable Software and Affected Versions Merethis Centreon versions prior to 2.3.2 Description The issue concerns the calculation of a password hash in the www/include/configuration/nconfigObject/contact/DB-Func.php file. Specifically, it does not utilize a salt, making it easier for...

Merethis Centreon 2.3.1 Code Execution

Trustwave's SpiderLabs Security Advisory TWSL2011-017: Multiple Vulnerabilities in Merethis Centreon https://www.trustwave.com/spiderlabs/advisories/TWSL2011-017.txt Published: 2011-11-04 Version: 1.0 Vendor: Merethis http://www.merethis.com and http://www.centreon.com Product: Centreon Version...

Centreon 2.3.1 - 'command_name' Remote Command Execution

source: https://www.securityfocus.com/bid/50568/info Centreon is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. Centreon 2.3.1 is affected; other versions may also be vulnerable...

Centreon 2.3.1 - command_name Remote Command Execution

Centreon 2.3.1 - commandname Remote Command Execution source: https://www.securityfocus.com/bid/50568/info Centreon is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. Centreon 2.3.1 is affected;...

Centreon 'main.php' SQL Injection Vulnerability

Centreon is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

Centreon 'main.php' SQL Injection Vulnerability

Centreon is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Sql injection

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2010-1301

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2010-1301

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2010-1301

Centreon 2.1.5 contains an SQL injection in main.php exploited via the host_id parameter. The OpenVAS entries confirm Centreon is prone to SQLi due to insufficient input sanitization, enabling remote attackers to execute arbitrary SQL commands and potentially compromise data. The affected compone...

CVE-2010-1301: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

Vulnerability Centreon IT & Network Monitoring v2.1.5

!/usr/bin/perl //--------PoC---------// Title : Centreon IT & Network Monitoring v2.1.5 - Injection SQL Version : 2.1.5 Author : Jonathan Salwan [email protected] Vuln sql injection http://localhost/centreon/main.php?p=201&hostid=-120SQL Injection&o=p&min=1...