Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2021-28053
Disclosure Date: July 16, 2021 (last updated February 23, 2025)
An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" allows remote authenticated users to execute arbitrary SQL commands via the Additional Information parameters.
0
Attacker Value
Unknown
CVE-2021-28054
Disclosure Date: July 16, 2021 (last updated February 23, 2025)
An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter.
0
Attacker Value
Unknown
CVE-2021-28055
Disclosure Date: April 15, 2021 (last updated February 22, 2025)
An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user.
0
