NVD

Id
31927  
Name
CVE-2014-3828  
Description
Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter to views/graphs/GetXmlTree.php, (3) the session_id parameter to views/graphs/graphStatus/displayServiceStatus.php, (4) the mnftr_id parameter to configuration/configObject/traps/GetXMLTrapsForVendor.php, or (5) the index parameter to common/javascript/commandGetArgs/cmdGetExample.php in include/.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-10-22  
Modified Date
2015-08-31  
Seq
2014-3828  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168261 31927 CVE-2014-3828 20141016 Multiple unauthenticated SQL injections and unauthenticated remote command injection in Centreon <= 2.5.2 and Centreon Enterprise Server <= 2.2|3.0  View
168262 31927 CVE-2014-3828 VU#298796  View
168263 31927 CVE-2014-3828 70648  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16192 JVNDB-2014-005067 Centreon および Centreon Enterprise Server における SQL インジェクションの脆弱性 Centreon および Centreon Enterprise Server には、SQL インジェクションの脆弱性が存在します。 CVE-2014-3828 71116 CVE-2014-3828 31927 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005067.html 2014-10-17 2014-10-28 View