CVE-2020-13252

Centreon CVE-2020-13252 affects Centreon prior to version 19.04.15. The vulnerability is a command injection in RRDdatabase_status_path, exploitable by remote attackers who supply shell metacharacters in a request parameter to main.get.php and then load include/views/graphs/graphStatus/displaySer...

Centreon Remote Code Execution Vulnerability (CNVD-2021-24277)

Centreon is a free and open source IT and application monitoring software. A remote code execution vulnerability exists in versions of Centreon prior to 19.04.15. The vulnerability can be exploited to execute arbitrary OS commands by placing shell metacharacters in the RRDdatabasestatuspath and...

Centreon formMibs.php Command Injection (CVE-2019-15298)

A command injection vulnerability exists in the Centreon Web Application. Successful exploitation of this vulnerability could result in arbitrary command execution in the context of the server process...

Centreon 19.10.5 - (id) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Centreon 19.10.5 - 'id' SQL Injection Exploit Author: Basim alabdullah Vendor Homepage: https://www.centreon.com Software Link: https://download.centreon.com/ Version: v.19.10.5 Tested on: Centos 5 EXECUTIVE SUMMARY Centreon has...

Centreon 19.10.5 - 'id' SQL Injection

Exploit Title: Centreon 19.10.5 - 'id' SQL Injection Date: 2020-04-19 Exploit Author: Basim alabdullah Vendor Homepage: https://www.centreon.com Software Link: https://download.centreon.com/ Version: v.19.10.5 Tested on: Centos 5 EXECUTIVE SUMMARY Centreon has come a long way from its early roots...

Centreon 19.10.5 SQL Injection

Exploit Title: Centreon 19.10.5 - 'id' SQL Injection Date: 2020-04-19 Exploit Author: Basim alabdullah Vendor Homepage: https://www.centreon.com Software Link: https://download.centreon.com/ Version: v.19.10.5 Tested on: Centos 5 EXECUTIVE SUMMARY Centreon has come a long way from its early roots...

Centreon Command Injection (CVE-2020-9463)

A command injection vulnerability exists in the Centreon Web Application. Successful attack may result in arbitrary command execution in the context of the server process...

Centreon 19.11 SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Postauth SQL injection in Centreon 19.11 param: aclresname Vendor: https://www.centreon.com/ Vulnerable software: https://download.centreon.com/index.php?product=19.10&action=ask&id=5074 Repo: https://github.com/c610/free/...

Centreon 19.11 SQL Injection

Title: Postauth SQL injection in Centreon 19.11 param: aclresname Date: 03.04.2020 Vendor: https://www.centreon.com/ Vulnerable software: https://download.centreon.com/index.php?product=19.10&action=ask&id=5074 Repo: https://github.com/c610/free/ c@kali:$ cat cent.sqli POST...

Centreon Infrastructure Monitoring Software Code Execution Vulnerability

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A security vulnerability exists in Centreon Infrastructure Monitoring Software version...

CVE-2019-19699

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

CVE-2019-19699

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

Remote code execution

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

CVE-2019-19699

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

CVE-2019-19699

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

CVE-2019-19699

CVE-2019-19699 affects Centreon Infrastructure Monitoring Software up to version 19.10. The issue is an authenticated remote code execution via misconfigured Pollers that lets an attacker with admin access modify a root-executed executable by abusing the export of Poller configurations. The chain...

Centreo 19.10.8 - (DisplayServiceStatus) Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution Exploit Author: Engin Demirbilek Vendor Homepage: https://www.centreon.com/ Version: 19.10.8 Tested on: CentOS Advisory link:...

Centreo 19.10.8 - DisplayServiceStatus Remote Code Execution

Centreo 19.10.8 - DisplayServiceStatus Remote Code Execution Exploit Title: Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution Date: 2020-03-25 Exploit Author: Engin Demirbilek Vendor Homepage: https://www.centreon.com/ Version: 19.10.8 Tested on: CentOS Advisory link:...

Open Redirection

centreon/centreon is vulnerable to open redirection. A hidden parameter p allows an attacker to add additional URL parameters using the URL encoded & character and redirect users to an arbitrary page. This vulnerability can be leveraged to execute arbitrary code on the system when a privileged us...

Directory Traversal

centreon/centreon is vulnerable to directory traversal. An attacker is able to bypass URL validation and inject directory traversal characters using double single/double quotes characters and include local files outside of the root directory...