Approved changes feed: RSS · Atom
cpe:2.3:a:merethis:centreon:2.5.1:*:*:*:*:*:*:*
part: a version: 2.5.1 update: *
| Vendor | Merethis (91c2c9e2-0aba-56b6-b7b3-28df5a8585ee) |
|---|---|
| Product | Centreon (e390c853-3f7f-5471-862c-bafc439895c8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/centreon/centreon |
purl2cpe | 2026-06-01 10:15:44.384244 |
pkg:rpm/opensuse/centreon |
purl2cpe | 2026-06-01 10:15:44.384246 |
pkg:sourceforge/centreon |
purl2cpe | 2026-06-01 10:15:44.384247 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-3829 |
vulnerable | 2026-06-08 05:05:42.986555 |
Details available
displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.
Published: 2014-10-23T01:00:00.000Z
Updated: 2024-08-06T10:57:17.284Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3828 |
vulnerable | 2026-06-08 05:05:42.985378 |
Details available
Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter to views/graphs/GetXmlTree.php, (3) the session_id parameter to views/graphs/graphStatus/displayServiceStatus.php, (4) the mnftr_id parameter to configuration/configObject/traps/GetXMLTrapsForVendor.php, or (5) the index parameter to common/javascript/commandGetArgs/cmdGetExample.php in include/.
Published: 2014-10-23T01:00:00.000Z
Updated: 2024-08-06T10:57:17.781Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.