Lucene search
PRIOn knowledge basePRION:CVE-2015-1560HistoryJul 14, 2015 - 4:59 p.m.
Sql injection
2015-07-1416:59:00
PRIOn knowledge base
www.prio-n.com
6
SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon web 2.7.0) allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php.
References
packetstormsecurity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html
www.securityfocus.com/archive/1/535961/100/0/threaded
forge.centreon.com/projects/centreon/repository/revisions/d14f213b9c60de1bad0b464fd6403c828cf12582
github.com/centreon/centreon/commit/668a928f34dc0f67723d3db138c042eb7f979f28
Related
cve
cve
CVE-2015-1560
2015-07-14 16:59:00
nessus
nessus
Centreon GetXmlTree.php 'sid' Parameter SQLi
2016-08-31 00:00:00
nvd
nvd
CVE-2015-1560
2015-07-14 16:59:00
cvelist
cvelist
CVE-2015-1560
2015-07-14 16:00:00
zdt
zdt
Centreon 2.5.4 - Multiple Vulnerabilities
2015-07-08 00:00:00
exploitpack
exploitpack
Centreon 2.5.4 - Multiple Vulnerabilities
2015-07-08 00:00:00
packetstorm
packetstorm
Merethis Centreon 2.5.4 SQL Injection / Remote Command Execution
2015-07-08 00:00:00
securityvulns
securityvulns
openvas
openvas
Centreon Multiple Vulnerabilities (Sep 2015)
2015-09-08 00:00:00
exploitdb
exploitdb
Centreon 2.5.4 - Multiple Vulnerabilities
2015-07-08 00:00:00