CVE-2012-5967 SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via the menu parameter.
MediumCVSS 6.5
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via the menu parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| merethis centreon | = 2.3.3 | No fix listed |
| merethis centreon | = 2.3.4 | No fix listed |
| merethis centreon | = 2.3.5 | No fix listed |
| merethis centreon | = 2.3.6 | No fix listed |
| merethis centreon | = 2.3.7 | No fix listed |
| merethis centreon | = 2.3.8 | No fix listed |
| merethis centreon | = 2.3.9 | No fix listed |
| merethis centreon | = 2.3.9-4 | No fix listed |
| centreon/centreon | = 2.3.3 through 2.3.9-4 | No fix listed |
| Centreon web | = fixed in 2.6.0 | No fix listed |
References
- forge.centreon.com
- VU#856892 third-party-advisory us-government-resource
- github.com