Command injection

Command Injection in minPlayCommand.php in Centreon 19.04.4 and below allows an attacker to achieve command injection via a plugin test...

Open redirect

Open redirect via parameter ‘p’ in login.php in Centreon 19.04.4 and below allows an attacker to craft a payload and execute unintended behavior...

CVE-2019-19484

CVE-2019-19484 affects Centreon prior to version 19.04.5 (19.04.4 and below) and is due to an open redirect in login.php via the p URL parameter. An attacker can craft a payload to trigger unintended behavior by redirecting to an arbitrary URL. The linked records (including Red Hat advisory refer...

CVE-2019-19484

Open redirect via parameter ‘p’ in login.php in Centreon 19.04.4 and below allows an attacker to craft a payload and execute unintended behavior...

CVE-2019-19486

CVE-2019-19486 is a Local File Inclusion in Centreon (minPlayCommand.php) affecting 19.04.4 and earlier. The vulnerability allows path traversal via a plugin test, enabling access to files outside the intended directory. Red Hat and NVD entries confirm the same description; CVSS metrics exist (CV...

CVE-2019-19486

Local File Inclusion in minPlayCommand.php in Centreon 19.04.4 and below allows an attacker to traverse paths via a plugin test...

CVE-2019-19487

Command Injection in minPlayCommand.php in Centreon 19.04.4 and below allows an attacker to achieve command injection via a plugin test...

CVE-2019-19487

CVE-2019-19487 is documented in Red Hat advisories as a command injection in Centreon’s minPlayCommand.php, affecting Centreon versions 19.04.4 and below. The Red Hat entries explicitly describe exploitation via a plugin test that allows command execution, confirming the vulnerable component and ...

Centreon Input Validation Error Vulnerability (CNVD-2020-21242)

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . An input validation error vulnerability exists in Centreon 19.04.4 and earlier version...

Centreon Path Traversal Vulnerability

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A path traversal vulnerability exists in the minPlayCommand.php file in Centreon 9.04....

Centreon OS Command Injection Vulnerability (CNVD-2020-21244)

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . Centreon 19.04.4 and earlier versions of the minPlayCommand.php file operating system...

Centreon Poller Authenticated Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Centreon Poller Authenticated Remote Command Execution', 'Description' = %q An authenticated user with sufficient administrative rights to manage...

Centreon Web Authorization Issues Vulnerability

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . Centreon Web has an authorization issue vulnerability that can be exploited by attackers to bypass...

CVE-2019-17646

An issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2. It provides sensitive information via an unauthenticated direct request for api/external.php?object=centreonmetric&action=listByService...

CVE-2019-17646

An issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2. It provides sensitive information via an unauthenticated direct request for api/external.php?object=centreonmetric&action=listByService...

CVE-2019-17647

An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/monitoring/status/Hosts/xml/hostXML.php instance parameter...

CVE-2019-17647

An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/monitoring/status/Hosts/xml/hostXML.php instance parameter...

Sql injection

An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/monitoring/status/Hosts/xml/hostXML.php instance parameter...

Design/Logic Flaw

An issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2. It provides sensitive information via an unauthenticated direct request for api/external.php?object=centreonmetric&action=listByService...

CVE-2019-17646

An issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2. It provides sensitive information via an unauthenticated direct request for api/external.php?object=centreonmetric&action=listByService...