Showing 1 - 2 of 2

Files from MaZ

First Active	2014-10-18
Last Active	2014-10-23

Centreon SQL / Command Injection: Posted Oct 23, 2014; Authored by juan vazquez, MaZ | Site metasploit.com; This Metasploit module exploits several vulnerabilities on Centreon 2.5.1 and prior and Centreon Enterprise Server 2.2 and prior. Due to a combination of SQL injection and command injection in the displayServiceStatus.php component, it is possible to execute arbitrary commands as long as there is a valid session registered in the centreon.session table. In order to have a valid session, all it takes is a successful login from anybody. The exploit itself does not require any authentication. This Metasploit module has been tested successfully on Centreon Enterprise Server 2.2.; tags | exploit, arbitrary, php, vulnerability, sql injection; advisories | CVE-2014-3828, CVE-2014-3829; SHA-256 | 8809b442b4ed7e090f87d00c54c5b7bdd1ab5b1b01a8996dfc1c2404ff0bb501; Download | Favorite | View

Centreon SQL Injection / Command Injection: Posted Oct 18, 2014; Authored by MaZ; Centreon versions 2.5.2 and below and Centreon Enterprise Server versions 2.2 and below and 3.0 and below suffer from remote SQL injection and remote command injection vulnerabilities.; tags | exploit, remote, vulnerability, sql injection; advisories | CVE-2014-3828, CVE-2014-3829; SHA-256 | 2bbcd9c0f7916e18957b35abbdb6401cfd1ba1a7514ea9da21386fe29c69f1db; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days