2014-10-22

2014-10-23

2014-10-24

CVE-2014-3829 CRITICAL POC THREAT Emergency

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1). Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.2%.

RCE PHP Code Injection Centreon Centreon Enterprise Server

NVD GitHub Exploit-DB

CVSS 2.0

10.0

EPSS

86.2%

Threat

6.1

CVE-2014-3828 CRITICAL POC THREAT Emergency

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 78.6%.

PHP SQLi Centreon Centreon Enterprise Server

NVD GitHub Exploit-DB

CVSS 2.0

10.0

EPSS

78.6%

Threat

5.9