critical9.8
CVE-2019-16194
SQL injection in Centreon
Impact
SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | centreon/centreon | < 18.10.8 | 18.10.8 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Centreon | Centreon | through 19.04.0 |