Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-1301. PoCs published by Jonathan Salwan.
AI-analyzed exploit summary This Perl script demonstrates a SQL injection vulnerability in Centreon IT & Network Monitoring v2.1.5 by exploiting an unsanitized 'host_id' parameter. It authenticates, performs a UNION-based SQL injection to retrieve the database version, and saves the output to a file.
Description
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the host_id parameter.
Exploits (1)
This Perl script demonstrates a SQL injection vulnerability in Centreon IT & Network Monitoring v2.1.5 by exploiting an unsanitized 'host_id' parameter. It authenticates, performs a UNION-based SQL injection to retrieve the database version, and saves the output to a file.