CVE-2019-13024 PoC — Centreon 命令注入漏洞

Source

https://github.com/mhaskar/CVE-2019-13024

Associated Vulnerability

Title:Centreon 命令注入漏洞 (CVE-2019-13024)
Description:Centreon（Merethis Centreon）是一套需要与Nagios搭配使用的开源IT监控软件。该软件通过网页（Web）管理Nagios，以及通过第三方组件实现对网络、操作系统和应用程序的监控。 Centreon V19.04版本中存在命令注入漏洞。该漏洞源于外部输入数据构造可执行命令过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞执行非法命令。

Description

The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024

Readme

# CVE-2019-13024
The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024

File Snapshot


 [4.0K]  /data/pocs/685bfd3e7e10eddff2d9dedd7bc9448d0e721974
├── [3.2K]  Centreon-exploit.py
└── [ 100]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!