Centreon GetXmlTree.php 'sid' Parameter SQLi

high Nessus Plugin ID 93244

Language:

Synopsis

A PHP application running on the remote host is affected by a SQL injection vulnerability.

Description

The Centreon application running on the remote host is affected by a SQL injection (SQLi) vulnerability in the isUserAdmin() function due to improper sanitization of user-supplied input to the 'sid' parameter of the GetXmlTree.php script. An unauthenticated, remote attacker can exploit this issue, via a specially crafted request, to execute arbitrary SQL statements against the back-end database, resulting in the disclosure or manipulation of arbitrary data.

Note that the application is also reportedly affected by a remote command injection vulnerability; however, Nessus has not tested for this issue.

Solution

Upgrade to Centreon version 2.6.2 or later.

Plugin Details

Severity: High

ID: 93244

File Name: centreon_getxmltree_sid_sqli.nasl

Version: 1.6

Type: remote

Family: CGI abuses

Published: 8/31/2016

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.2

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.6

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:centreon:centreon, cpe:/a:merethis:centreon

Required KB Items: www/PHP, installed_sw/Centreon

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/15/2015

Vulnerability Publication Date: 7/8/2015

Reference Information

CVE: CVE-2015-1560

BID: 75602

Detections

Analytics