header-logo
Suggest Exploit
vendor:
Centreon
by:
7.5
CVSS
HIGH
Remote Command Injection
78
CWE
Product Name: Centreon
Affected Version From: 2.3.2001
Affected Version To:
Patch Exists: NO
Related CWE:
CPE: a:centreon:centreon:2.3.1
Metasploit:
Other Scripts:
Platforms Tested:

Centreon Remote Command Injection Vulnerability

The Centreon application is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application.

Mitigation:

Apply the latest patches from the vendor.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/50568/info

Centreon is prone to a remote command-injection vulnerability.

Attackers can exploit this issue to execute arbitrary commands in the context of the application.

Centreon 2.3.1 is affected; other versions may also be vulnerable. 

http://www.example.com/centreon/main.php?p=60706&command_name=/Centreon/SNMP/../../../../bin/cat%20/etc/passwd%20%23&o=h&min=1

Navigation

Suggest Exploit

Services By CQR