CVE-2011-4431

Merethis Centreon < 2.3.1 - Path Traversal

Title source: rule
STIX 2.1

Description

Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Christophe de la Fuente · textwebappsphp
https://www.exploit-db.com/exploits/36293

References (2)

Core 2
Core References
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8530

Scores

EPSS 0.0364
EPSS Percentile 87.9%

Details

CWE
CWE-22
Status published
Products (32)
merethis/centreon 1.4
merethis/centreon 1.4.1
merethis/centreon 1.4.2
merethis/centreon 1.4.2.1
merethis/centreon 1.4.2.2
merethis/centreon 1.4.2.3
merethis/centreon 1.4.2.4
merethis/centreon 1.4.2.5
merethis/centreon 1.4.2.6
merethis/centreon 1.4.2.7
... and 22 more
Published Nov 10, 2011
Tracked Since Feb 18, 2026