CVE-2012-5967

EUVD-2012-5841
SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via the menu parameter.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
Affected Products (NVD)
VendorProductVersion
merethiscentreon
2.3.3
merethiscentreon
2.3.4
merethiscentreon
2.3.5
merethiscentreon
2.3.6
merethiscentreon
2.3.7
merethiscentreon
2.3.8
merethiscentreon
2.3.9
merethiscentreon
2.3.9-4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://forge.centreon.com/projects/centreon/repository/revisions/13749
http://www.kb.cert.org/vuls/id/856892
https://github.com/centreon/centreon/commit/434e291eebcd8f56771ac96b37831634fa52b6a8#diff-606758231371c4a66ae2668f7ad2b617
http://forge.centreon.com/projects/centreon/repository/revisions/13749
http://www.kb.cert.org/vuls/id/856892
https://github.com/centreon/centreon/commit/434e291eebcd8f56771ac96b37831634fa52b6a8#diff-606758231371c4a66ae2668f7ad2b617