Command Injection in Centreon

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabasestatuspath via a main.get.php request and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page...

CVE-2020-13252

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabasestatuspath via a main.get.php request and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page...

CVE-2020-13252

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabasestatuspath via a main.get.php request and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page...

PT-2020-13398

Name of the Vulnerable Software and Affected Versions Centreon versions prior to 19.04.15 Description The issue allows remote attackers to execute arbitrary OS commands. This can be achieved by placing shell metacharacters in RRDdatabase status path via a "main.get.php" request, and then visiting...

CVE-2020-13252: Improper Neutralization of Special Elements used in an OS Command

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabasestatuspath via a main.get.php request and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page...

Centreon 19.11 SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Postauth SQL injection in Centreon 19.11 param: aclresname Vendor: https://www.centreon.com/ Vulnerable software: https://download.centreon.com/index.php?product=19.10&action=ask&id=5074 Repo: https://github.com/c610/free/...

Centreon Arbitrary System Command Execution Vulnerability

Centreon is a free and open source IT and application monitoring software. An arbitrary system command execution vulnerability exists in Centreon 19.04. An attacker can insert arbitrary commands into the database using the "initscript"-"Monitoring Engine Binary" value in main.get.php and execute...

PT-2019-13082

Name of the Vulnerable Software and Affected Versions Centreon versions 18.x through 18.10.5 Centreon versions 19.x through 19.04.2 Centreon web versions prior to 2.8.29 Description The issue allows an attacker to execute arbitrary system commands. This is achieved by using the value init script ...

CVE-2019-13024: Improper Neutralization of Special Elements used in a Command

Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using the value "initscript"-"Monitoring Engine Binary" in main.get.php to insert a arbitrary command into the database, and execute it by calling the...