CVE-2018-19281

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

CVE-2018-19281

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

Design/Logic Flaw

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

Sql injection

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

CVE-2018-19281

CVE-2018-19281 affects Centreon 3.4.x and is resolved in Centreon 18.10.0 and Centreon Web 2.8.27. The vulnerability is described as a SQL injection via SNMP trap, indicating that untrusted data from SNMP traps could be used to manipulate the backend database. Publicly provided connected document...

CVE-2018-19281

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

CVE-2018-19280

Centreon 3.4.x is affected by an XSS vulnerability exploitable via the resource name or a poller macro expression. The issue is fixed in Centreon 18.10.0; upgrading to 18.10.0 or later is the recommended remediation. The description does not provide exploit details beyond the XSS vector.

CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

CVE-2018-19271

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...

CVE-2018-19271

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...

Sql injection

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...

CVE-2018-19271

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...

CVE-2018-19271

CVE-2018-19271 affects Centreon 3.4.x, where the main.php searchH parameter allows SQL Injection due to improper handling of user input. The issue enables an attacker to manipulate queries, potentially escalating privileges or exfiltrating data. Affected versions are Centreon 3.4.x; remediation i...

Centreon <= 2.8.23 Multiple Vulnerabilities

Centreon Web is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Multiple SQL Injection Vulnerabilities in Centreon and Centreon Web

Centreon is a suite of open source IT monitoring software that needs to be used with Nagios to manage Nagios via the web web and third-party components to enable monitoring of the network, operating system and applications.Centreon Web is a web-based application for managing Centreon. Multiple SQ...

Centreon cross-site scripting vulnerability (CNVD-2018-17879)

Centreon is a free and open source IT and application monitoring software. A cross-site scripting vulnerability exists in Centreon version 3.4.6 and Centreon Web version 2.8.23. A remote attacker can exploit this vulnerability to inject a payload into a username or command description...

Centreon Remote Code Execution Vulnerability (CNVD-2018-14217)

Centreon and Centreon Web are both products of the French company Centreon.Centreon formerly Merethis Centreon is a suite of open-source IT monitoring software that is required to be used with Nagios, which it manages via the web, as well as third-party components for monitoring networks, operati...

Design/Logic Flaw

Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php...