SQL Injection

centreon/centreon is vulnerable to sql injection attacks. The vulnerability exists in dbResult parameter in DB-Func.php because the user provided inputs are not properly validated which allows an attacker to inject and execute arbitrary sql commands...

Information Disclosure

centreon/centreon is vulnerable to information disclosure. Lack of proper validation of user supplied strings while processing virtual metrics inDB-Func.php allows authenticated attackers to gain access to confidential user information such as stored credentials...