3 matches found
SQL Injection
Centreon Web is vulnerable to SQL injection. The hostid parameter in makeXMLListServices.php is directly appended to the SQL query, allowing an attacker to inject and execute arbitrary SQL script through the affected parameter...
8.8CVSS3.8AI score0.01836EPSS
SaveExploits0References4Affected Software1
Sql injection
makeXMLListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the hostid parameter...
6.5CVSS8.8AI score0.01836EPSS
SaveExploits0References3Affected Software1
CVE-2018-21022: Improper Neutralization of Special Elements used in an SQL Command
makeXMLListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the hostid parameter...
8.8CVSS7.8AI score0.01836EPSS
SaveExploits0References2
20