Centreon Cross-Site Scripting Vulnerability (CNVD-2022-66771)

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon. A cross-site scripting vulnerability exists in Centreon v20.10.18, which stems from the escname Escalation Name parameter in its Configuration/Notifications/Escalations component. The lack...

Cross-site Scripting (XSS)

centreon/centreon is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the escname attribute in formEscalation.php which allows an attacker to inject and execute malicious javascript...

SQL Injection

centreon/centreon is vulnerable to sql injection attacks. The vulnerability exists in dbResult parameter in DB-Func.php because the user provided inputs are not properly validated which allows an attacker to inject and execute arbitrary sql commands...

GHSA-25GV-WG6F-6FRP Centreon SQL Injection vulnerability via esc_name parameter

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. Versions 21.04.16, 21.10.8, and 22.04.2 contain patches...

Centreon contains cross-site scripting vulnerability via esc_name parameter

Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. Versions...

Centreon SQL Injection vulnerability via esc_name parameter

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. Versions 21.04.16, 21.10.8, and 22.04.2 contain patches...

GHSA-RV5Q-72P2-2Q24 Centreon contains cross-site scripting vulnerability via esc_name parameter

Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. Versions...

CVE-2022-40044

Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2022-40043

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations...

CVE-2022-40043

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations...

Cross site scripting

Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

Sql injection

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations...

CVE-2022-40044

Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2022-40044

Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2022-40044

Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2022-40044

CVE-2022-40044 affects Centreon v20.10.18, where the esc_name parameter in the Configuration/Notifications/Escalations component is vulnerable to Cross-Site Scripting (XSS) due to insufficient input sanitization. The vulnerability allows an attacker to inject and execute arbitrary web scripts or ...

CVE-2022-40043

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations...

CVE-2022-40043

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations...

CVE-2022-40043

CVE-2022-40043 affects Centreon v20.10.18, where a SQL injection vulnerability exists in the esc_name parameter of Configuration/Notifications/Escalations. The root cause is lack of validation of externally entered SQL statements, enabling potential unauthorized SQL execution and data access. Imp...

Centreon SQL注入漏洞

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . A SQL injection vulnerability exists in Centreon v20.10.18, which stems from the escname Escalation Name parameter of its Configuration/Notifications/Escalations component Lack of...