SQL Injection

centreon/centreon is vulnerable to sql injection attacks. The vulnerability exists in dbResult parameter in DB-Func.php because the user provided inputs are not properly validated which allows an attacker to inject and execute arbitrary sql commands...

Information Disclosure

centreon/centreon is vulnerable to information disclosure. Lack of proper validation of user supplied strings while processing virtual metrics inDB-Func.php allows authenticated attackers to gain access to confidential user information such as stored credentials...

CVE-2011-4432: Undefined Security Weakness

www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...