19 matches found
EUVD-2019-9106
Malware in sbrugna...
CVE-2019-19487
Command Injection in minPlayCommand.php in Centreon 19.04.4 and below allows an attacker to achieve command injection via a plugin test...
Remote file inclusion
Local File Inclusion in minPlayCommand.php in Centreon 19.04.4 and below allows an attacker to traverse paths via a plugin test...
Command injection
Command Injection in minPlayCommand.php in Centreon 19.04.4 and below allows an attacker to achieve command injection via a plugin test...
CVE-2019-19486
Local File Inclusion in minPlayCommand.php in Centreon 19.04.4 and below allows an attacker to traverse paths via a plugin test...
CVE-2019-19487
CVE-2019-19487 is documented in Red Hat advisories as a command injection in Centreon’s minPlayCommand.php, affecting Centreon versions 19.04.4 and below. The Red Hat entries explicitly describe exploitation via a plugin test that allows command execution, confirming the vulnerable component and ...
PT-2020-10168
Name of the Vulnerable Software and Affected Versions Centreon versions 19.04.4 and below Description The issue allows an attacker to craft a payload and execute unintended behavior via an open redirect in the login.php file. Additionally, command injection is possible via a plugin test in the...
CVE-2019-19486: Improper Limitation of a Pathname to a Restricted Directory
Local File Inclusion in minPlayCommand.php in Centreon 19.04.4 and below allows an attacker to traverse paths via a plugin test...
CVE-2019-19487: Improper Neutralization of Special Elements used in an OS Command
Command Injection in minPlayCommand.php in Centreon 19.04.4 and below allows an attacker to achieve command injection via a plugin test...
PT-2020-10170
Name of the Vulnerable Software and Affected Versions Centreon versions 19.04.4 and below Description The issue allows an attacker to achieve command injection via a plugin test in the minPlayCommand.php file. Recommendations For Centreon versions 19.04.4 and below, at the moment, there is no...
PT-2020-10169
Name of the Vulnerable Software and Affected Versions Centreon versions 19.04.4 and below Description The issue allows an attacker to achieve command injection via a plugin test in the minPlayCommand.php file. This can also be exploited for Local File Inclusion, enabling an attacker to traverse...
Centreon OS Command Injection Vulnerability (CNVD-2020-21244)
Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . Centreon 19.04.4 and earlier versions of the minPlayCommand.php file operating system...
OS Command Injection
centreon/centreon is vulnerable to OS command injection. Lack of sanitization allows an attacker to inject and execute arbitrary OS commands on the system in minPlayCommand.php...
CVE-2019-17107
minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the commandhostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this, but that is incorrect...
Code injection
minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the commandhostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this, but that is incorrect...
CVE-2019-17107
minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the commandhostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this, but that is incorrect...
CVE-2019-17107
minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the commandhostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this, but that is incorrect...
CVE-2019-17107: Improper Neutralization of Special Elements used in an OS Command
minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the commandhostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this, but that is incorrect...
PT-2019-14947
Name of the Vulnerable Software and Affected Versions Centreon Web versions prior to 2.8.27 Description The issue allows authenticated attackers to execute arbitrary code. This is achieved via the command hostaddress parameter in the minPlayCommand.php file. Recommendations For versions prior to...