Exploitation Summary
EIP tracks 2 public exploits for CVE-2015-1560. PoCs published by Iansus.
AI-analyzed exploit summary This repository contains a Python-based exploit for CVE-2015-1560 and CVE-2015-1561, targeting Centreon <= 2.5.4. It includes blind SQL injection and command execution capabilities via session manipulation.
Description
SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon web 2.7.0) allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php.
Exploits (2)
This repository contains a Python-based exploit for CVE-2015-1560 and CVE-2015-1561, targeting Centreon <= 2.5.4. It includes blind SQL injection and command execution capabilities via session manipulation.
This is a detailed technical writeup describing two vulnerabilities in Centreon: an unauthenticated blind SQL injection (CVE-2015-1560) and an authenticated remote command execution (CVE-2015-1561). It includes proof-of-concept URLs, affected functions, and references to vendor fixes.