CVE-2008-1179

Centreon 1.4.2.3 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color_picker.php, exploitable via the name and title parameters. The issue allows remote attackers to inject arbitrary web script or HTML and execute it in the victim’s br...

CVE-2008-1179

Multiple cross-site scripting XSS vulnerabilities in include/common/javascript/colorpicker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 title parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-1178: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2008-1119...

CVE-2008-1179: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in include/common/javascript/colorpicker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 title parameters. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in include/doc/getimage.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the img parameter...

CVE-2008-1119

Directory traversal vulnerability in include/doc/getimage.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the img parameter...

CVE-2008-1119

Directory traversal vulnerability in include/doc/getimage.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the img parameter...

CVE-2008-1119

CVE-2008-1119 affects Centreon 1.4.2.3 and earlier, by a directory traversal in include/doc/get_image.php via the img parameter. An unauthenticated, remote attacker can read arbitrary files on the server, subject to web server privileges. This exact vulnerability is corroborated by connected Ness...

centreon1423-disclose.txt

Info: Software: Centreon user-getlang."/".$GET"page", "r"; + Exploit: /include/doc/index.php?page=../../www/oreon.conf.php /include/doc/index.php?page=../../../../../etc/passwd /include/doc/index.php?page=Local File...

CVE-2008-1119: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/doc/getimage.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the img parameter...

Centreon 1.4.2.3 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/28052/info Centreon is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain potentially sensitive information that may lead to further attacks. This...

Centreon <= 1.4.2.3 (index.php) Remote File Disclosure

Info: Software: Centreon = 1.4.2.3 HomePage: http://www.centreon.com Exploit: Remote File Disclosure High Where: include/doc/index.php Bug Found By: Jose Luis Gуngora Fernбndez|JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Spanish Hackers Team SHT + Bug In...

Centreon 1.4.2.3 - index.php Local File Inclusion

Centreon 1.4.2.3 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/28052/info Centreon is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain potentially sensitive...

Centreon <= 1.4.2.3 (get_image.php) Remote File Disclosure Exploit

No description provided by source. !/usr/bin/python Date : 20/01/2008 Author : Julien CAYSSOL [email protected] import sys, urllib2,re useragent = 'Mozilla/6.0 compatible; MSIE 6.0; Windows NT' headers = 'User-Agent' : useragent , 'Accept-Charset' : 'ISO-8859-15' if name == "main": if lensys.argv==...

centreon-disclose.txt

!/usr/bin/python Date : 20/01/2008 Author : Julien CAYSSOL import sys, urllib2,re useragent = 'Mozilla/6.0 compatible; MSIE 6.0; Windows NT' headers = 'User-Agent' : useragent , 'Accept-Charset' : 'ISO-8859-15' if name == "main": if lensys.argv==2: host = sys.argv1 print " + Host : " + host url =...

Centreon 1.4.2.3 - 'get_image.php' Remote File Disclosure

!/usr/bin/python Date : 20/01/2008 Author : Julien CAYSSOL import sys, urllib2,re useragent = 'Mozilla/6.0 compatible; MSIE 6.0; Windows NT' headers = 'User-Agent' : useragent , 'Accept-Charset' : 'ISO-8859-15' if name == "main": if lensys.argv==2: host = sys.argv1 print " + Host : " + host url =...

Centreon <= 1.4.2.3 (get_image.php) Remote File Disclosure Exploit

Exploit for unknown platform in category web applications ================================================================== Centreon = 1.4.2.3 getimage.php Remote File Disclosure Exploit ================================================================== !/usr/bin/python Date : 20/01/2008 Author ...

Centreon 1.4.2.3 - get_image.php Remote File Disclosure

Centreon 1.4.2.3 - getimage.php Remote File Disclosure !/usr/bin/python Date : 20/01/2008 Author : Julien CAYSSOL import sys, urllib2,re useragent = 'Mozilla/6.0 compatible; MSIE 6.0; Windows NT' headers = 'User-Agent' : useragent , 'Accept-Charset' : 'ISO-8859-15' if name == "main": if...

Centreon include/doc/get_image.php 'img' Parameter Traversal Arbitrary File Access

The remote host is running Centreon or Oreon, a web-based network supervision program based on Nagios. The version of Centreon / Oreon installed on the remote host fails to sanitize user-supplied input to the 'img' parameter of the 'include/doc/getimage.php' script before using it to display the...

Centreon 1.4.2 - color_picker.php Multiple Cross-Site Scripting Vulnerabilities

Centreon 1.4.2 colorpicker.php Multiple Cross-Site Scripting Vulnerabilities. CVE-2008-1179. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28043/info Centreon is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied...