CVE-2021-28054

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting XSS issue in "Configuration Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter...

CVE-2021-28054

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting XSS issue in "Configuration Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter...

CVE-2021-28054

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting XSS issue in "Configuration Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter...

Cross site scripting

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting XSS issue in "Configuration Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter...

CVE-2021-28054

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting XSS issue in "Configuration Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter...

UBUNTU-CVE-2021-28054

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting XSS issue in "Configuration Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter...

CVE-2021-28053

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration Users Contacts / Users" allows remote authenticated users to execute arbitrary SQL commands via the Additional Information parameters...

CVE-2021-28053

Centreon Platform 20.10.0 (Centreon-Web) contains a SQL injection vulnerability in Configuration > Users > Contacts / Users that allows remote authenticated users to run arbitrary SQL via Additional Information parameters. The PT-2021-17730 entry notes a workaround to restrict access to tha...

CVE-2021-28054

CVE-2021-28054 affects Centreon-Web (Centreon Platform 20.10.0). A stored XSS flaw exists in Configuration > Hosts where a remote authenticated user can inject arbitrary web script or HTML via the Alias parameter. Impact, as stated, is the ability to execute script in the context of the affect...

CVE-2021-28054

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting XSS issue in "Configuration Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter...

CVE-2021-28053: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration Users Contacts / Users" allows remote authenticated users to execute arbitrary SQL commands via the Additional Information parameters...

PT-2021-17731

Name of the Vulnerable Software and Affected Versions: Centreon Platform version 20.10.0 Description: A Stored Cross-Site Scripting XSS issue in "Configuration Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter. This issue affects the...

PT-2021-17730

Name of the Vulnerable Software and Affected Versions: Centreon Platform version 20.10.0 Description: A SQL injection issue was found in Centreon-Web, part of the Centreon Platform. This allows remote authenticated users to execute arbitrary SQL commands via the Additional Information parameters ...

Centreon SQL注入漏洞

Centreon Merethis Centreon is a set of open source system monitoring tools from Centreon, a French company. Centreon Platform version 20.10.0 is vulnerable to SQL injection, which can be exploited by remote attackers to execute arbitrary SQL commands with additional information parameters...

CVE-2021-28054: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting XSS issue in "Configuration Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter...

Centreon 跨站脚本漏洞

Centreon Merethis Centreon is a set of open source system monitoring tools from Centreon France. A cross-site scripting vulnerability exists in Centreon Platform version 20.10.0, which can be exploited by remote authenticated attackers to inject arbitrary Web scripts or HTML via alias parameters...

Command Injection in Centreon

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabasestatuspath via a main.get.php request and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page...

GHSA-JMGG-WX67-7QFV Command Injection in Centreon

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabasestatuspath via a main.get.php request and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page...

Cross-site scripting in Centreon

Centreon version 20.10.2 is affected by a cross-site scripting XSS vulnerability. The depdescription Dependency Description and depname Dependency Name parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration Notifications Hosts page...

GHSA-R5MF-Q76Q-F2XQ Cross-site scripting in Centreon

Centreon version 20.10.2 is affected by a cross-site scripting XSS vulnerability. The depdescription Dependency Description and depname Dependency Name parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration Notifications Hosts page...