1392 matches found
CVE-2022-39988
A cross-site scripting XSS vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the ServiceTemplates servicealias parameter...
CVE-2022-39988
Centreon 22.04.0 is vulnerable to a stored XSS via the Service > Templates > service_alias input. The root cause is lack of proper input filtering/escaping, allowing attackers to inject arbitrary script/HTML. The CVE entry (CVE-2022-39988) and multiple sources (NVD, Red Hat, CNVD/CNNVD, OSV...
PT-2022-25156 · Centreon · Centreon
Name of the Vulnerable Software and Affected Versions: Centreon version 22.04.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the service alias parameter in the ServiceTemplates section. Recommendations:...
CVE-2022-39988
A cross-site scripting XSS vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the ServiceTemplates servicealias parameter...
CVE-2022-39988
A cross-site scripting XSS vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the ServiceTemplates servicealias parameter...
PT-2022-25672 · Centreon · Centreon
Name of the Vulnerable Software and Affected Versions: Centreon affected versions not specified Description: This issue allows remote attackers to escalate privileges on affected installations. Authentication is required to exploit this issue. The specific flaw exists within the handling of...
Centreon Poller Resource SQL Injection Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper...
Centreon 22.04.0 Cross Site Scripting Vulnerability
Exploit Title: Stored XSS in servicealias parameter in Centreon version 22.04.0 Exploit Author: syad Vendor Homepage: Centreon Software Link: https://download.centreon.com/ Version: 22.04.0 CVE ID : CVE-2022-39988 Tested on: Centos 7 Centreon 22.04.0 is vulnerable to Stored Cross Site Scripting X...
Centreon 22.04.0 Cross Site Scripting
Exploit Title: Stored XSS in servicealias parameter in Centreon version 22.04.0 Date: 1/10/2022 Exploit Author: syad Vendor Homepage: Centreon Software Link: https://download.centreon.com/ Version: 22.04.0 CVE ID : CVE-2022-39988 Tested on: Centos 7 Centreon 22.04.0 is vulnerable to Stored Cross...
Centreon 跨站脚本漏洞
Centreon Merethis Centreon is a set of open source system monitoring tools from Centreon, a French company. A cross-site scripting vulnerability exists in Centreon version 22.04.0. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data, which can be...
Centreon SQL Injection Vulnerability (CNVD-2022-66770)
Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . A SQL injection vulnerability exists in Centreon v20.10.18, which stems from the escname Escalation Name parameter of its Configuration/Notifications/Escalations component Lack of...
Centreon Cross-Site Scripting Vulnerability (CNVD-2022-66771)
Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon. A cross-site scripting vulnerability exists in Centreon v20.10.18, which stems from the escname Escalation Name parameter in its Configuration/Notifications/Escalations component. The lack...
Cross-site Scripting (XSS)
centreon/centreon is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the escname attribute in formEscalation.php which allows an attacker to inject and execute malicious javascript...
SQL Injection
centreon/centreon is vulnerable to sql injection attacks. The vulnerability exists in dbResult parameter in DB-Func.php because the user provided inputs are not properly validated which allows an attacker to inject and execute arbitrary sql commands...
Centreon SQL Injection vulnerability via esc_name parameter
Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. Versions 21.04.16, 21.10.8, and 22.04.2 contain patches...
Centreon contains cross-site scripting vulnerability via esc_name parameter
Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. Versions...
GHSA-25GV-WG6F-6FRP Centreon SQL Injection vulnerability via esc_name parameter
Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. Versions 21.04.16, 21.10.8, and 22.04.2 contain patches...
GHSA-RV5Q-72P2-2Q24 Centreon contains cross-site scripting vulnerability via esc_name parameter
Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. Versions...
CVE-2022-40044
Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...