PT-2018-10688

Name of the Vulnerable Software and Affected Versions Centreon version 3.4.6 Centreon Web version 2.8.23 Description The issue allows for SQL injection attacks through various parameters in different PHP files. Specifically, attacks can be launched via the searchU parameter in "viewLogs.php", the...

PT-2018-10687

Name of the Vulnerable Software and Affected Versions Centreon versions 3.4.6 Centreon Web version 2.8.23 Description The issue allows an authenticated user to inject a payload into the username or command description, resulting in stored XSS. This is related to files such as menu.php and...

CVE-2018-11587: Improper Control of Generation of Code

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php...

Centreon 'Comments' POST Parameter Cross Site Scripting Vulnerability

Centreon is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:centreon:centreon";...

Centreon Cross-Site Scripting Vulnerability

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A cross-site scripting...

CVE-2015-7672

Cross-site scripting XSS vulnerability in Centreon 2.6.1 fixed in Centreon 18.10.0 and Centreon web 2.8.27...

Cross site scripting

Cross-site scripting XSS vulnerability in Centreon 2.6.1 fixed in Centreon 18.10.0 and Centreon web 2.8.27...

CVE-2015-7672

Cross-site scripting XSS vulnerability in Centreon 2.6.1 fixed in Centreon 18.10.0 and Centreon web 2.8.27...

CVE-2015-7672

Cross-site scripting XSS vulnerability in Centreon 2.6.1 fixed in Centreon 18.10.0 and Centreon web 2.8.27...

CVE-2015-7672

CVE-2015-7672 is a cross-site scripting (XSS) vulnerability in Centreon 2.6.1. The provided documents confirm the issue and indicate a fix in Centreon 18.10.0 and Centreon Web 2.8.27. The root cause details are not explicitly described in the sources, and there is no explicit exploitation status ...

CVE-2015-7672: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Centreon 2.6.1 fixed in Centreon 18.10.0 and Centreon web 2.8.27...

PT-2017-7257

Name of the Vulnerable Software and Affected Versions Centreon versions prior to 18.10.0 Centreon web versions prior to 2.8.27 Centreon version 2.6.1 Description A cross-site scripting XSS issue exists. This allows for potential malicious script execution. Recommendations For Centreon version...

Centreon < 2.5.1 / Centreon Enterprise Server < 2.2 - SQL Injection / Command Injection Exploi

Exploit for linux platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Centreon SQL and Command Injection', 'Description' = %q This module...

Centreon GetXmlTree.php 'sid' Parameter SQLi

The Centreon application running on the remote host is affected by a SQL injection SQLi vulnerability in the isUserAdmin function due to improper sanitization of user-supplied input to the 'sid' parameter of the GetXmlTree.php script. An unauthenticated, remote attacker can exploit this issue, vi...

Centreon Web Interface Remote Command Execution Vulnerability

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A remote command...

Centreon Web Useralias Remote Command Execution

A Remote command execution vulnerability exists in Centreon Web Interface. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Centreon Web Interface 2.5.3 Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Centreon Web Useralias Command Execution', 'Description' = %q Centreon Web Interface 'h00die ', module 'Nicolas CHATELAIN '...

Centreon 2.5.3 - Web Useralias Command Execution (Metasploit)

Exploit for python platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Centreon Web Useralias Command Execution', 'Description' = %q Centreon...

Centreon 2.5.3 - Web Useralias Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Centreon Web Useralias Command Execution', 'Description' = %q Centreon Web Interface 'h00die ', module 'Nicolas CHATELAIN '...

Centreon 'POST' Parameter Multiple Vulnerabilities

Centreon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:centreon:centreon"; ifdescription...