Approved changes feed: RSS · Atom

cpe:2.3:a:merethis:centreon_enterprise_server:2.2:*:*:*:*:*:*:*

part: a version: 2.2 update: *

VendorMerethis (91c2c9e2-0aba-56b6-b7b3-28df5a8585ee)
ProductCentreon Enterprise Server (01ea9357-4af8-5407-a056-88cd3d9b6418)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3829 vulnerable 2026-06-08 05:05:42.986579 Details available
displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.
Published: 2014-10-23T01:00:00.000Z
Updated: 2024-08-06T10:57:17.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3828 vulnerable 2026-06-08 05:05:42.986119 Details available
Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter to views/graphs/GetXmlTree.php, (3) the session_id parameter to views/graphs/graphStatus/displayServiceStatus.php, (4) the mnftr_id parameter to configuration/configObject/traps/GetXMLTrapsForVendor.php, or (5) the index parameter to common/javascript/commandGetArgs/cmdGetExample.php in include/.
Published: 2014-10-23T01:00:00.000Z
Updated: 2024-08-06T10:57:17.781Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.