Centreon IT And Network Monitoring 2.1.5 SQL Injection

!/usr/bin/perl //--------PoC---------// Title : Centreon IT & Network Monitoring v2.1.5 - Injection SQL Version : 2.1.5 Author : Jonathan Salwan [email protected] Vuln sql injection http://localhost/centreon/main.php?p=201&hostid=-1%20SQL Injection&o=p&min=1...

Centreon IT & Network Monitoring v2.1.5 - Injection SQL Vulnerability

Exploit for php platform in category web applications ===================================================================== Centreon IT & Network Monitoring v2.1.5 - Injection SQL Vulnerability ===================================================================== !/usr/bin/perl...

Centreon IT & Network Monitoring v2.1.5 - Injection SQL

No description provided by source. !/usr/bin/perl //--------PoC---------// Title : Centreon IT & Network Monitoring v2.1.5 - Injection SQL Version : 2.1.5 Author : Jonathan Salwan [email protected] Vuln sql injection http://localhost/centreon/main.php?p=201&hostid=-1%20SQL Injection&o=p&min=1...

Centreon IT Network Monitoring 2.1.5 - SQL Injection

Centreon IT Network Monitoring 2.1.5 - SQL Injection !/usr/bin/perl //--------PoC---------// Title : Centreon IT & Network Monitoring v2.1.5 - Injection SQL Version : 2.1.5 Author : Jonathan Salwan [email protected] Vuln sql injection http://localhost/centreon/main.php?p=201&hostid=-1%20SQL...

Centreon IT & Network Monitoring 2.1.5 - SQL Injection

!/usr/bin/perl //--------PoC---------// Title : Centreon IT & Network Monitoring v2.1.5 - Injection SQL Version : 2.1.5 Author : Jonathan Salwan [email protected] Vuln sql injection http://localhost/centreon/main.php?p=201&hostid=-1%20SQL Injection&o=p&min=1...

Centreon Authentication Mechanism Security Bypass Vulnerability

Centreon is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access to certain functionality, which may lead to further attacks. Versions prior to Centreon 2.1.4 are vulnerable. OpenVAS Vulnerability Test $I...

Centreon Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Centreon Authentication Mechanism Security Bypass Vulnerability

Centreon is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:centreon:centreon"; if...

Authentication flaw

Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...

CVE-2009-4368

Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...

CVE-2009-4368

Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...

CVE-2009-4368

Centreon before 2.1.4 has multiple vulnerabilities in the ping, traceroute, and LDAP import components, likely related to improper authentication. Affects Centreon installations running versions prior to 2.1.4. Remediation: upgrade to Centreon 2.1.4 or apply the vendor patch (VendorFix). No explo...

CVE-2009-4368: Undefined Security Weakness

Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...

Directory traversal

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2008-1119...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in include/common/javascript/colorpicker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 title parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-1179

Multiple cross-site scripting XSS vulnerabilities in include/common/javascript/colorpicker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 title parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-1178

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2008-1119...

CVE-2008-1179

Multiple cross-site scripting XSS vulnerabilities in include/common/javascript/colorpicker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 title parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-1178

Summary (supported facts): Centreon versions 1.4.2.3 and earlier are affected by two directory-traversal vulnerabilities: (1) CVE-2008-1119 in include/doc/get_image.php via the img parameter, and (2) CVE-2008-1178 in include/doc/index.php via the page parameter. In both cases, unsanitized user in...

CVE-2008-1179

Centreon 1.4.2.3 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color_picker.php, exploitable via the name and title parameters. The issue allows remote attackers to inject arbitrary web script or HTML and execute it in the victim’s br...