10
CVSSv2

CVE-2014-3829

Published: 23/10/2014 Updated: 21/11/2024

Vulnerability Summary

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote malicious users to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

merethis centreon 2.5.1

merethis centreon enterprise server 2.2

Exploits

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super(update_info(info, 'Name' ...
Centreon versions 252 and below and Centreon Enterprise Server versions 22 and below and 30 and below suffer from remote SQL injection and remote command injection vulnerabilities ...