CVE-2022-3827

A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. The name of the patch is 293b10628f7d9f83c6c82c78cf637cbe9b907369. It is recommended to apply a patch to fix this issue. VDB-212794 is the identifier assigned to this vulnerability.

• CWE-707

• https://github.com/centreon/centreon/commit/293b10628f7d9f83c6c82c78cf637cbe9b907369Patch, Third Party Advisory
• https://github.com/centreon/centreon/pull/11869Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?id.212794Third Party Advisory
• https://github.com/centreon/centreon/commit/293b10628f7d9f83c6c82c78cf637cbe9b907369Patch, Third Party Advisory
• https://github.com/centreon/centreon/pull/11869Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?id.212794Third Party Advisory

Published

Nov 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-38260Interview Management System v1.0 was discovered to contain a…7.2
• CVE-2022-38265Apartment Visitor Management System v1.0 was discovered to c…7.2
• CVE-2022-38266An issue in the Leptonica linked library (v1.79.0) allows at…6.5
• CVE-2022-38267School Activity Updates with SMS Notification v1.0 was disco…7.2
• CVE-2022-38268School Activity Updates with SMS Notification v1.0 was disco…7.2
• CVE-2022-38269School Activity Updates with SMS Notification v1.0 was disco…7.2
• CVE-2022-38272JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/a…7.2
• CVE-2022-38273JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/a…7.2
• CVE-2022-38274JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/c…7.2
• CVE-2022-38275JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/c…7.2
• CVE-2022-38276JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/f…7.2
• CVE-2022-38277JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/f…7.2