CVE-2021-37556

A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/reporting/dashboard/csvExport/csv_HostGroupLogs.php start and end parameters.

• CWE-89

• https://github.com/centreon/centreon/pull/9781Patch, Third Party Advisory
• https://www.synacktiv.com/sites/default/files/2021-07/Centreon_Multiple_vulnerabilities_0.pdfExploit, Third Party Advisory
• https://github.com/centreon/centreon/pull/9781Patch, Third Party Advisory
• https://www.synacktiv.com/sites/default/files/2021-07/Centreon_Multiple_vulnerabilities_0.pdfExploit, Third Party Advisory

Published

Aug 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37550In JetBrains YouTrack before 2021.2.16363, time-unsafe compa…7.5
• CVE-2021-37551In JetBrains YouTrack before 2021.2.16363, system user passw…5.3
• CVE-2021-37552In JetBrains YouTrack before 2021.2.17925, stored XSS was po…5.4
• CVE-2021-37553In JetBrains YouTrack before 2021.2.16363, an insecure PRNG …7.5
• CVE-2021-37554In JetBrains YouTrack before 2021.3.21051, a user could see …4.3
• CVE-2021-37555TX9 Automatic Food Dispenser v3.2.57 devices allow access to…9.8
• CVE-2021-37557A SQL injection vulnerability in image generation in Centreo…8.8
• CVE-2021-37558A SQL injection vulnerability in a MediaWiki script in Centr…9.8
• CVE-2021-3756libmysofa is vulnerable to Heap-based Buffer Overflow9.8
• CVE-2021-37560MediaTek microchips, as used in NETGEAR devices through 2021…8.8
• CVE-2021-37561MediaTek microchips, as used in NETGEAR devices through 2021…8.8
• CVE-2021-37562MediaTek microchips, as used in NETGEAR devices through 2021…7.5