{"id":"CVE-2014-3828","published":"2014-10-23T01:00:00Z","modified":"2024-08-06T10:57:17Z","title":"Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter to views/graphs/GetXmlTree.php, (3) the session_id parameter to views/graphs/graphStatus/displayServiceStatus.php, (4) the mnftr_id parameter to configuration/configObject/traps/GetXMLTrapsForVendor.php, or (5) the index parameter to common/javascript/commandGetArgs/cmdGetExample.php in include/.","provenance":"source","from":"CVE.org"},"summary":{"text":"Centreon 2.5.1 and Centreon Enterprise Server 2.2 contain multiple SQL injection flaws in several web components, including graph views, trap configuration and command argument scripts, with the affected endpoints identified as makeXML_ListMetrics.php, GetXmlTree.php, displayServiceStatus.php, GetXMLTrapsForVendor.php and cmdGetExample.php.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:36Z"},"cvss":null,"epss":{"score":0.72712,"percentile":0.99445,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://seclists.org/fulldisclosure/2014/Oct/78","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://www.kb.cert.org/vuls/id/298796","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"http://www.securityfocus.com/bid/70648","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.5/centreon-2.5.3.html","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/centreon/centreon/commit/cc2109804dd69057cb209037113796ec5ffdce90#diff-e328097503b14fbb117e0db798aefcde","tags":["x_refsource_CONFIRM"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: remote SQL injection against public-facing web application","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"allow remote attackers to execute arbitrary SQL commands via","start":122,"end":182}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1059","name":"Command and Scripting Interpreter","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: arbitrary SQL command execution on database backend","mappingType":"primary_impact","evidence":[{"from":"description","quote":"allow remote attackers to execute arbitrary SQL commands","start":122,"end":178}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-49fc93fc459e761858b6","title":"Centreon to Exim and Back: On the Trail of Sandworm","publisher":"domaintools.com","url":"https://www.domaintools.com/blog/centreon-to-exim-and-back-on-the-trail-of-sandworm","date":null,"mentions":[{"quote":"DomainTools cannot make a definitive determination, based on these details it appears that the intruder likely used a vulnerability such as CVE-2014-3828, a SQL injection vulnerability in Centreon patched in version 2.5.3, to write data to the vulnerable system (such as a webshell) which could facilitate","start":2263,"end":2568}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2014-3766","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-3766","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":35078,"url":"https://www.exploit-db.com/exploits/35078","title":"Centreon - SQL Injection / Command Injection (Metasploit)","type":"remote","platform":"unix","date":"2014-10-27","verified":true,"provenance":"source"},{"id":41676,"url":"https://www.exploit-db.com/exploits/41676","title":"Centreon < 2.5.1 / Centreon Enterprise Server < 2.2 - SQL Injection / Command Injection (Metasploit)","type":"webapps","platform":"linux","date":"2014-10-15","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":2,"earliest":"2014-10-15"},"metasploit":[{"name":"Centreon SQL and Command Injection","module":"exploit/linux/http/centreon_sqli_exec","type":"exploit","disclosureDate":"2014-10-15","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/centreon_sqli_exec.rb"}],"first":{"date":"2014-10-15","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/41676"},"provenance":"source"},"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1059"],"provenance":"ai"}],"timeline":[{"date":"2014-10-15","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-41676); later: Metasploit 2014-10-15","url":"https://www.exploit-db.com/exploits/41676","provenance":"source"},{"date":"2014-10-23","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2014-3828","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":28.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.89,"detail":"percentile 0.9944"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"2 Exploit-DB entries; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}