CVE-2011-4431
Merethis Centreon < 2.3.2 - Authenticated Path Traversal via Command Name Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-4431. PoCs published by Christophe de la Fuente.
AI-analyzed exploit summary This exploit demonstrates a remote command injection vulnerability in Centreon via a crafted URL. The PoC leverages path traversal and command injection to execute arbitrary commands (e.g., cat /etc/passwd) without authentication.
Description
Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter.
Exploits (1)
This exploit demonstrates a remote command injection vulnerability in Centreon via a crafted URL. The PoC leverages path traversal and command injection to execute arbitrary commands (e.g., cat /etc/passwd) without authentication.