CVE-2021-37558

A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to execute arbitrary SQL commands via the host_name and service_description parameters. The vulnerability can be exploited only when a valid Knowledge Base URL is configured on the Knowledge Base configuration page and points to a MediaWiki instance. This relates to the proxy feature in class/centreon-knowledge/ProceduresProxy.class.php and include/configuration/configKnowledge/proxy/proxy.php.

• CWE-89

• https://github.com/centreon/centreon/pull/9796Patch, Third Party Advisory
• https://www.synacktiv.com/sites/default/files/2021-07/Centreon_Multiple_vulnerabilities_0.pdfExploit, Third Party Advisory
• https://github.com/centreon/centreon/pull/9796Patch, Third Party Advisory
• https://www.synacktiv.com/sites/default/files/2021-07/Centreon_Multiple_vulnerabilities_0.pdfExploit, Third Party Advisory

Published

Aug 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37552In JetBrains YouTrack before 2021.2.17925, stored XSS was po…5.4
• CVE-2021-37553In JetBrains YouTrack before 2021.2.16363, an insecure PRNG …7.5
• CVE-2021-37554In JetBrains YouTrack before 2021.3.21051, a user could see …4.3
• CVE-2021-37555TX9 Automatic Food Dispenser v3.2.57 devices allow access to…9.8
• CVE-2021-37556A SQL injection vulnerability in reporting export in Centreo…8.8
• CVE-2021-37557A SQL injection vulnerability in image generation in Centreo…8.8
• CVE-2021-3756libmysofa is vulnerable to Heap-based Buffer Overflow9.8
• CVE-2021-37560MediaTek microchips, as used in NETGEAR devices through 2021…8.8
• CVE-2021-37561MediaTek microchips, as used in NETGEAR devices through 2021…8.8
• CVE-2021-37562MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-37563MediaTek microchips, as used in NETGEAR devices through 2021…8.8
• CVE-2021-37564MediaTek microchips, as used in NETGEAR devices through 2021…7.5