Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Centreon 操作系统命令注入漏洞
Vulnerability Description
Centreon（Merethis Centreon）是法国Centreon公司的一套开源的系统监控工具 。该产品主要提供对网络、系统和应用程序等资源的监控功能。 Centreon 19.04.15之前版本中存在操作系统命令注入漏洞。远程攻击者可通过将shell元字符放在RRDdatabase_status_path中（通过main.get.php请求）并访问include/views/graphs/graphStatus/displayServiceStatus.php页面利用该漏洞执行任意操作系统命令
CVSS Information
N/A
Vulnerability Type
N/A