Centreon

centreon

Vendor: Merethis • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-3829 1Merethis 2Centreon Centreon Enterprise Server May 6, 2026 Oct 23, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) temp...Show more displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.Show less
CVE-2014-3828 1Merethis 2Centreon Centreon Enterprise Server May 6, 2026 Oct 23, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/g...Show more Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter to views/graphs/GetXmlTree.php, (3) the session_id parameter to views/graphs/graphStatus/displayServiceStatus.php, (4) the mnftr_id parameter to configuration/configObject/traps/GetXMLTrapsForVendor.php, or (5) the index parameter to common/javascript/commandGetArgs/cmdGetExample.php in include/.Show less
CVE-2012-5967 1Merethis 1Centreon Apr 29, 2026 Dec 19, 2012 N/A· v4 N/A· v3 6.5 MEDIUM· v2 SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via the menu parameter.
CVE-2011-4432 1Merethis 1Centreon Apr 29, 2026 Nov 10, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine...Show more www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach.Show less
CVE-2011-4431 1Merethis 1Centreon Apr 29, 2026 Nov 10, 2011 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter.
CVE-2010-1301 1Merethis 1Centreon Apr 29, 2026 Apr 7, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the host_id parameter.
CVE-2009-4368 1Merethis 1Centreon Apr 23, 2026 Dec 21, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the (1) ping tool, (2) traceroute tool, and (3) ldap import, possibly related to improper authentication.