SQL Injection

centreon/centreon is vulnerable to SQL Injection attacks. A specifically crafted statement through the cgid parameter in formContactGroup.php, allows a remote authenticated attacker to inject and execute arbitrary SQL queries on the target system...