Lucene search
+L

1391 matches found

NVD
NVD
added 2024/08/21 5:15 p.m.30 views

CVE-2024-5723

Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateServiceHost...

8.8CVSS0.40669EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/21 5:15 p.m.15 views

CVE-2024-5725

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the initCurveList functio...

8.8CVSS0.47648EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/21 4:14 p.m.63 views

CVE-2024-5725

Centreon vulnerability CVE-2024-5725 is a SQL Injection in the initCurveList function that allows remote code execution. The flaw arises from improper validation of a user-supplied string used to build SQL queries, enabling an attacker to run arbitrary code in the context of the apache user. Auth...

8.8CVSS9.2AI score0.47648EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/08/21 4:14 p.m.16 views

CVE-2024-5725 Centreon initCurveList SQL Injection Remote Code Execution Vulnerability

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the initCurveList functio...

8.8CVSS0.47648EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/21 4:14 p.m.15 views

CVE-2024-5725 Centreon initCurveList SQL Injection Remote Code Execution Vulnerability

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the initCurveList functio...

8.8CVSS8.9AI score0.47648EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/21 4:14 p.m.7 views

CVE-2024-5725 Centreon initCurveList SQL Injection Remote Code Execution Vulnerability

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the initCurveList functio...

8.8CVSS6.6AI score0.47648EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/08/21 4:14 p.m.31 views

CVE-2024-5723 Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability

Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateServiceHost...

8.8CVSS0.40669EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/21 4:14 p.m.19 views

CVE-2024-5723 Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability

Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateServiceHost...

8.8CVSS8.9AI score0.40669EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/21 4:14 p.m.66 views

CVE-2024-5723

Centreon updateServiceHost exposes a SQL Injection that leads to Remote Code Execution. The flaw occurs in updateServiceHost due to improper validation of a user-supplied string used to build SQL queries, allowing an attacker to run code in the apache user context after authentication is required...

8.8CVSS9.2AI score0.40669EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/08/21 4:14 p.m.15 views

CVE-2024-5723 Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability

Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateServiceHost...

8.8CVSS7.8AI score0.40669EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/07/25 12:0 a.m.9 views

The vulnerability of the testServiceExistence() function in the software for monitoring IT infrastructure of Centreon allows a hacker to execute arbitrary code.

The vulnerability of the testServiceExistence function in the Centreon IT infrastructure monitoring software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.1AI score0.01133EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2024/07/15 12:0 a.m.10 views

Centreon testServiceExistence SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the testServiceExistence function. The issue results from the lack of proper validation of a...

8.8CVSS7.8AI score0.01133EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/06/21 12:0 a.m.5 views

PT-2024-6880 · Centreon · Centreon

Name of the Vulnerable Software and Affected Versions: Centreon version 24.04.2 Description: A SQL injection vulnerability in Centreon allows a remote high-privileged attacker to execute arbitrary SQL commands via user massive changes inputs. This vulnerability is related to the lack of protectio...

7.2CVSS8.9AI score0.01775EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2024/06/21 12:0 a.m.7 views

PT-2024-6878 · Centreon · Centreon

Name of the Vulnerable Software and Affected Versions: Centreon version 24.04.2 Description: A SQL injection vulnerability allows a remote high-privileged attacker to execute arbitrary SQL commands via create user form inputs. This issue is related to the lack of protection of the SQL query...

6.7CVSS9.1AI score0.02154EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
added 2024/06/13 12:0 a.m.12 views

The vulnerability of the `updateServiceHost` function in the Centreon IT infrastructure monitoring software allows a hacker to execute arbitrary code.

The vulnerability of the updateServiceHost function in the Centreon IT infrastructure monitoring software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.1AI score0.40669EPSS
SaveExploits0References5Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2024/06/10 12:0 a.m.14 views

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the initCurveList function. The issue results from the lack of proper validation of a user-supplied...

8.8CVSS8.1AI score0.47648EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/06/10 12:0 a.m.13 views

Centreon updateServiceHost_MC SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateServiceHostMC function. The issue results from the lack of proper validation of a...

8.8CVSS8.1AI score0.19187EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/06/10 12:0 a.m.17 views

PT-2024-37101 · Centreon · Centreon

Name of the Vulnerable Software and Affected Versions: Centreon affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this issue. The specific flaw exists within the...

8.8CVSS8AI score0.47648EPSS
SaveExploits0References10
Zero Day Initiative
Zero Day Initiative
added 2024/06/10 12:0 a.m.19 views

Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateServiceHost function. The issue results from the lack of proper validation of a...

8.8CVSS8.1AI score0.40669EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:16 a.m.5 views

CVE-2023-51633

Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. User interaction is required to exploit this vulnerability. The specific flaw exists within the processing of the...

9.6CVSS6.3AI score0.0109EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder