Centreon SQL Injection

HIGH 8.8CVE-2018-19312 · GHSA-5jxp-4x68-mhqc · Published 16/11/2018 · updated 17/06/2026

In short

CVE-2018-19312 is a HIGH (CVSS 8.8) vulnerability affecting centreon/centreon, centreon (centreon).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.0% of all vulnerabilities.
Fix: update to 18.10.0, 2.8.24 or later.

Package	Affected versions	Patched versions
centreon/centreon Packagist	`≥ 18.0.0, < 18.10.0≥ 2.8.0, < 2.8.24`	`18.10.02.8.24`
centreon centreon	`≥ 3.4.0, ≤ 3.4.9`	No fix yet

Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.24) allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI.

NVD description

Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.24) allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 18.0.0, < 18.10.0≥ 2.8.0, < 2.8.24

18.10.02.8.24

≥ 3.4.0, ≤ 3.4.9

No fix yet

Description

Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.24) allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI.

NVD description

Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.24) allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI.

More vulnerabilities in centreon/centreon

See all →