CVE-2014-3828
Centreon 2.5.1 and Centreon Enterprise Server 2.2 - SQL Injection via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2014-3828.
PoCs published by Metasploit, MaZ, juan vazquez, including Metasploit module exploits/linux/http/centreon_sqli_exec.
AI-analyzed exploit summary This Metasploit module exploits SQL and command injection vulnerabilities in Centreon's displayServiceStatus.php component, allowing arbitrary command execution if a valid session exists in the centreon.session table. It leverages a combination of SQLi and command injection to achieve RCE without requiring authentication.
Description
Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter to views/graphs/GetXmlTree.php, (3) the session_id parameter to views/graphs/graphStatus/displayServiceStatus.php, (4) the mnftr_id parameter to configuration/configObject/traps/GetXMLTrapsForVendor.php, or (5) the index parameter to common/javascript/commandGetArgs/cmdGetExample.php in include/.
Exploits (3)
This Metasploit module exploits SQL and command injection vulnerabilities in Centreon's displayServiceStatus.php component, allowing arbitrary command execution if a valid session exists in the centreon.session table. It leverages a combination of SQLi and command injection to achieve RCE without requiring authentication.
This Metasploit module exploits a combination of SQL injection and command injection vulnerabilities in Centreon's displayServiceStatus.php component, allowing arbitrary command execution without authentication if a valid session exists in the centreon.session table.
This Metasploit module exploits a combination of SQL injection and command injection in Centreon's displayServiceStatus.php component, allowing arbitrary command execution without authentication, provided a valid session exists in the centreon.session table.