CVE-2014-3829
Centreon 2.5.1 and Centreon Enterprise Server 2.2 - Remote Code Execution via session_id or template_id Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-3829.
PoCs published by Metasploit, MaZ, juan vazquez, including Metasploit module exploits/linux/http/centreon_sqli_exec.
AI-analyzed exploit summary This Metasploit module exploits SQL and command injection vulnerabilities in Centreon (CVE-2014-3829) to achieve remote code execution. It leverages a valid session ID to inject malicious payloads via the displayServiceStatus.php component.
Description
displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.
Exploits (2)
This Metasploit module exploits SQL and command injection vulnerabilities in Centreon (CVE-2014-3829) to achieve remote code execution. It leverages a valid session ID to inject malicious payloads via the displayServiceStatus.php component.
This Metasploit module exploits a combination of SQL injection and command injection in Centreon's displayServiceStatus.php component, allowing arbitrary command execution without authentication, provided a valid session exists in the centreon.session table.