CVE-2018-19271

Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.28) allows SQL Injection via the main.php searchH parameter.

• CWE-89

• http://www.rootlabs.com.br/authenticated-sql-injection-in-centreon-3-4-x/Exploit, Third Party Advisory
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.28.html
• https://github.com/centreon/centreon/pull/6625Third Party Advisory
• http://www.rootlabs.com.br/authenticated-sql-injection-in-centreon-3-4-x/Exploit, Third Party Advisory
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.28.html
• https://github.com/centreon/centreon/pull/6625Third Party Advisory

Published

Nov 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19266Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-19267Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-19268Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-19269Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1927IBM StoredIQ 7.6 is vulnerable to cross-site request forgery…6.5
• CVE-2018-19270Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-19274Passing an absolute path to a file_exists check in phpBB bef…7.2
• CVE-2018-19275The BluStar component in Mitel InAttend before 2.5 SP3 and C…
• CVE-2018-19276OpenMRS before 2.24.0 is affected by an Insecure Object Dese…9.8
• CVE-2018-19277securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 all…8.8
• CVE-2018-19278Buffer overflow in DNS SRV and NAPTR lookups in Digium Aster…
• CVE-2018-19279PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks…