Lucene search
+L

3 matches found

Veracode
Veracode
•added 2019/10/09 3:52 a.m.•29 views

SQL Injection

Centreon Web is vulnerable to SQL injection. The hostid parameter in makeXMLListServices.php is directly appended to the SQL query, allowing an attacker to inject and execute arbitrary SQL script through the affected parameter...

8.8CVSS3.8AI score0.01836EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2019/10/08 1:15 p.m.•22 views

Sql injection

makeXMLListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the hostid parameter...

6.5CVSS8.8AI score0.01836EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/08 12:00 a.m.•4 views

CVE-2018-21022: Improper Neutralization of Special Elements used in an SQL Command

makeXMLListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the hostid parameter...

8.8CVSS7.8AI score0.01836EPSS
SaveExploits0References2
Rows per page
Query Builder