Centreon formMibs.php Command Injection (CVE-2019-15298)

A command injection vulnerability exists in the Centreon Web Application. Successful exploitation of this vulnerability could result in arbitrary command execution in the context of the server process...

CVE-2019-15298

Centreon Web (version 19.04.3 and earlier) is affected by an authenticated command injection in include/configuration/configObject/traps-mibs/formMibs.php. The mnftr parameter is not properly filtered when submitting a file via the mibs management form, allowing injected Linux commands to be exec...