Authentication flaw

Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...

CVE-2009-4368

Centreon before 2.1.4 has multiple vulnerabilities in the ping, traceroute, and LDAP import components, likely related to improper authentication. Affects Centreon installations running versions prior to 2.1.4. Remediation: upgrade to Centreon 2.1.4 or apply the vendor patch (VendorFix). No explo...

CVE-2009-4368

Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in include/common/javascript/colorpicker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 title parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-1179

Multiple cross-site scripting XSS vulnerabilities in include/common/javascript/colorpicker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 title parameters. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2008-1119...

CVE-2008-1178

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2008-1119...

CVE-2008-1178

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2008-1119...

CVE-2008-1178

Summary (supported facts): Centreon versions 1.4.2.3 and earlier are affected by two directory-traversal vulnerabilities: (1) CVE-2008-1119 in include/doc/get_image.php via the img parameter, and (2) CVE-2008-1178 in include/doc/index.php via the page parameter. In both cases, unsanitized user in...

CVE-2008-1179

Multiple cross-site scripting XSS vulnerabilities in include/common/javascript/colorpicker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 title parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-1179

Centreon 1.4.2.3 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color_picker.php, exploitable via the name and title parameters. The issue allows remote attackers to inject arbitrary web script or HTML and execute it in the victim’s br...

Directory traversal

Directory traversal vulnerability in include/doc/getimage.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the img parameter...

CVE-2008-1119

Directory traversal vulnerability in include/doc/getimage.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the img parameter...

CVE-2008-1119

Directory traversal vulnerability in include/doc/getimage.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the img parameter...

CVE-2008-1119

CVE-2008-1119 affects Centreon 1.4.2.3 and earlier, by a directory traversal in include/doc/get_image.php via the img parameter. An unauthenticated, remote attacker can read arbitrary files on the server, subject to web server privileges. This exact vulnerability is corroborated by connected Ness...

centreon1423-disclose.txt

Info: Software: Centreon user-getlang."/".$GET"page", "r"; + Exploit: /include/doc/index.php?page=../../www/oreon.conf.php /include/doc/index.php?page=../../../../../etc/passwd /include/doc/index.php?page=Local File...

Centreon 1.4.2.3 - index.php Local File Inclusion

Centreon 1.4.2.3 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/28052/info Centreon is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain potentially sensitive...

Centreon <= 1.4.2.3 (get_image.php) Remote File Disclosure Exploit

No description provided by source. !/usr/bin/python Date : 20/01/2008 Author : Julien CAYSSOL [email protected] import sys, urllib2,re useragent = 'Mozilla/6.0 compatible; MSIE 6.0; Windows NT' headers = 'User-Agent' : useragent , 'Accept-Charset' : 'ISO-8859-15' if name == "main": if lensys.argv==...

Centreon 1.4.2.3 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/28052/info Centreon is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain potentially sensitive information that may lead to further attacks. This...

Centreon <= 1.4.2.3 (index.php) Remote File Disclosure

Info: Software: Centreon = 1.4.2.3 HomePage: http://www.centreon.com Exploit: Remote File Disclosure High Where: include/doc/index.php Bug Found By: Jose Luis Gуngora Fernбndez|JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Spanish Hackers Team SHT + Bug In...