Latest vulnerabilities for "centreon enterprise server"

Where

Sort:

Versions

2.2

Merethis CentreonCode Injection

Risk 87

Severity

Code Injection

AV:N/AC:L/Au:N/C:C/I:C/A:C

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sessionid or (2) templateid parameter, related to the commandline variable.

First published (updated )

CVE-2014-3829

Merethis CentreonSQL Injection

Risk 87

Severity

SQL Injection

AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the indexid parameter to views/graphs/common/makeXMLListMetrics.php, (2) the sid parameter to views/graphs/GetXmlTree.php, (3) the sessionid parameter to views/graphs/graphStatus/displayServiceStatus.php, (4) the mnftrid parameter to configuration/configObject/traps/GetXMLTrapsForVendor.php, or (5) the index parameter to common/javascript/commandGetArgs/cmdGetExample.php in include/.

First published (updated )

CVE-2014-3828

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.