CVE-2018-21022

Critical 8.8

makeXML_ListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the host_id parameter.

Published October 8, 2019.