SQL Injection

2022-11-0305:20:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

centreon

sql injection

formcontactgroup vulnerability

remote attack

EPSS

0.002

Percentile

59.8%

JSON

centreon/centreon is vulnerable to SQL Injection attacks. A specifically crafted statement through the cg_id parameter in formContactGroup.php, allows a remote authenticated attacker to inject and execute arbitrary SQL queries on the target system.