description: SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via the menu parameter.
affected:
{
product: Centreon
vendor: Centreon
versions:
status: affected, version: 2.3.3 through 2.3.9-4
}
{
product: Centreon web
vendor: Centreon
versions:
status: affected, version: fixed in 2.6.0
}
