CVE-2024-39842

The Centreon monitoring tool is vulnerable to SQL injection in version 24.04.2 . The root cause is the lack of proper validation for user-supplied strings before they are used to construct SQL queries, specifically within the updateContactServiceCommands_MC , updateContactHostCommands_MC , and up...

CVE-2024-39842: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes inputs...