CVE-2011-4431

Centreon before 2.3.2 is affected by a directory traversal vulnerability in main.php where the command_name parameter is not properly validated. This allows remote authenticated users to execute arbitrary commands via a .. (dot dot) path traversal sequence. The issue arises from insufficient inpu...