CVE-2018-11589

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php, the chartId parameter in ExportCSVServiceData.php, the searchCurve parameter in listComponentTemplates.php, or the host_id parameter in makeXML_ListMetrics.php.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jun 25, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-11596.5Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An authenticated remote attacker can crash thCVE-2018-115905.5Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overfloCVE-2018-115915.5Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via a NULL pointer derCVE-2018-115925.5Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via an Out-of-bounds RCVE-2018-115937.1Espruino before 1.99 allows attackers to cause a denial of service (application crash) and potential Information Disclosure with a user crafCVE-2018-115945.5Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow CVE-2018-115957.8Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Escalation of Privileges with a user CVE-2018-115965.5Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow CVE-2018-115975.5Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow CVE-2018-115987.1Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user crafCVE-2018-11609.8Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlCVE-2018-11619.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authent