CVE-2020-18048

An issue in craigms/main.php of CraigMS 1.0 allows attackers to execute arbitrary commands via a crafted input entered into the DB Name field...

CVE-2020-18048: Improper Neutralization of Special Elements used in a Command

An issue in craigms/main.php of CraigMS 1.0 allows attackers to execute arbitrary commands via a crafted input entered into the DB Name field...

CVE-2019-19699

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

CVE-2020-10821

Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter...

Cross site scripting

Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter...

CVE-2020-10821

Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter...

CVE-2020-10821: Improper Neutralization of Input During Web Page Generation

Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter...

CVE-2019-17501

Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 aka the Configuration Commands Discovery screen. CVE-2019-17501 and CVE-2019-16405 are similar to one another and may be the same...

CVE-2019-17501: Improper Neutralization of Special Elements used in an OS Command

Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 aka the Configuration Commands Discovery screen. CVE-2019-17501 and CVE-2019-16405 are similar to one another and may be the same...

Sql injection

SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued...

CVE-2018-20806: Improper Neutralization of Input During Web Page Generation

Phamm aka PHP LDAP Virtual Hosting Manager 0.6.8 allows XSS via the login page the /public/main.php action parameter...

PT-2018-15238

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.5 Description The issue allows for XSS via the first text box to the "SEMCMS Main.php" URI. Recommendations For SEMCMS version 3.5, update to a version that fixes this issue, or as a temporary workaround, consider restricting...

Sql injection

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...

CVE-2018-19311

Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...

Design/Logic Flaw

Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...

CVE-2018-19311

Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...

PT-2018-14912

Name of the Vulnerable Software and Affected Versions Centreon versions 3.4.x through 18.09.x Description The issue allows for XSS via the Service field to the "main.php?p=20201" URI, as demonstrated by the "Monitoring Status Details Services" screen. Recommendations For Centreon versions 3.4.x...

CVE-2018-19312: Improper Neutralization of Special Elements used in an SQL Command

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...

CVE-2018-19311: Improper Neutralization of Input During Web Page Generation

Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...

PT-2018-14913

Name of the Vulnerable Software and Affected Versions Centreon versions 3.4.x Description The issue allows SQL Injection via the searchVM parameter to the "/main.php?p=20408" API endpoint. Recommendations For Centreon versions 3.4.x, update to Centreon 18.10.0 or Centreon web 2.8.24 to resolve th...