Centreon <= 1.4.2.3 (index.php) Remote File Disclosure

Info: Software: Centreon = 1.4.2.3 HomePage: http://www.centreon.com Exploit: Remote File Disclosure High Where: include/doc/index.php Bug Found By: Jose Luis Gуngora Fernбndez|JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Spanish Hackers Team SHT + Bug In...

centreon-disclose.txt

!/usr/bin/python Date : 20/01/2008 Author : Julien CAYSSOL import sys, urllib2,re useragent = 'Mozilla/6.0 compatible; MSIE 6.0; Windows NT' headers = 'User-Agent' : useragent , 'Accept-Charset' : 'ISO-8859-15' if name == "main": if lensys.argv==2: host = sys.argv1 print " + Host : " + host url =...

Centreon 1.4.2.3 - 'get_image.php' Remote File Disclosure

!/usr/bin/python Date : 20/01/2008 Author : Julien CAYSSOL import sys, urllib2,re useragent = 'Mozilla/6.0 compatible; MSIE 6.0; Windows NT' headers = 'User-Agent' : useragent , 'Accept-Charset' : 'ISO-8859-15' if name == "main": if lensys.argv==2: host = sys.argv1 print " + Host : " + host url =...

Centreon 1.4.2 - color_picker.php Multiple Cross-Site Scripting Vulnerabilities

Centreon 1.4.2 colorpicker.php Multiple Cross-Site Scripting Vulnerabilities. CVE-2008-1179. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28043/info Centreon is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied...

Centreon <= 1.4.2.3 (get_image.php) Remote File Disclosure Exploit

Exploit for unknown platform in category web applications ================================================================== Centreon = 1.4.2.3 getimage.php Remote File Disclosure Exploit ================================================================== !/usr/bin/python Date : 20/01/2008 Author ...

Centreon 1.4.2.3 - get_image.php Remote File Disclosure

Centreon 1.4.2.3 - getimage.php Remote File Disclosure !/usr/bin/python Date : 20/01/2008 Author : Julien CAYSSOL import sys, urllib2,re useragent = 'Mozilla/6.0 compatible; MSIE 6.0; Windows NT' headers = 'User-Agent' : useragent , 'Accept-Charset' : 'ISO-8859-15' if name == "main": if...

Centreon include/doc/get_image.php 'img' Parameter Traversal Arbitrary File Access

The remote host is running Centreon or Oreon, a web-based network supervision program based on Nagios. The version of Centreon / Oreon installed on the remote host fails to sanitize user-supplied input to the 'img' parameter of the 'include/doc/getimage.php' script before using it to display the...

CVE-2007-6485

Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...

CVE-2007-6485

Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...

CVE-2007-6485

Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...

CVE-2007-6485

CVE-2007-6485 affects Centreon/Oreon 1.4.1. It enables remote PHP code execution via the fileOreonConf parameter in MakeXML.php and MakeXML4statusCounter.php under include/monitoring/engine/, exploitable by unauthenticated attackers over the network. The root cause is improper handling/sanitizati...

oreon-rfi.txt

By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file is: ./oreon-1.4/www/include/monitoring/engine/MakeXML.php Another,virtuall...

Centreon 'fileOreonConf' Parameter File Include Vulnerabilities

The remote host is running Centreon or Oreon, a web-based network supervision program based on Nagios. The version of Centreon / Oreon installed on the remote host fails to sanitize user-supplied input to the 'fileOreonConf' parameter of the 'MakeXML.php' and 'MakeXML4statusCounter.php' scripts...

Oreon/Centreon - Multiple Remote File Inclusion

By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file is: ./oreon-1.4/www/include/monitoring/engine/MakeXML.php Another,virtuall...

Oreon 1.4 / Centreon 1.4.1 Multiple RFI Vulnerabilties

No description provided by source. By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file is:...

Oreon 1.4 Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities

Oreon 1.4 Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file...

Oreon 1.4 / Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities

By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file is: ./oreon-1.4/www/include/monitoring/engine/MakeXML.php Another,virtuall...

Oreon 1.4 / Centreon 1.4.1 Multiple RFI Vulnerabilties

Exploit for unknown platform in category web applications ====================================================== Oreon 1.4 / Centreon 1.4.1 Multiple RFI Vulnerabilties ====================================================== By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion...