Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter to views/graphs/GetXmlTree.php, (3) the session_id parameter to views/graphs/graphStatus/displayServiceStatus.php, (4) the mnftr_id parameter to configuration/configObject/traps/GetXMLTrapsForVendor.php, or (5) the index parameter to common/javascript/commandGetArgs/cmdGetExample.php in include/.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Centreon和Centreon Enterprise Server SQL注入漏洞
Vulnerability Description
Centreon（Merethis Centreon）是一套需要与Nagios搭配使用的开源IT监控软件。该软件通过网页（Web）管理Nagios，以及通过第三方组件实现对网络、操作系统和应用程序的监控。Centreon Enterprise Server（CES）是一个企业服务器版。 Merethis Centreon 2.5.1版本和Centreon Enterprise Server 2.2版本中存在SQL注入漏洞，该漏洞源于以下脚本没有充分过滤参数：views/graphs/common/make
CVSS Information
N/A
Vulnerability Type
N/A