CVEs-PoC/2020/CVE-2020-9463.md

CVE-2020-9463

Description

Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_remote request.

POC

Reference

• https://code610.blogspot.com/2020/02/postauth-rce-in-centreon-1910.html

Github

• https://github.com/ARPSyndicate/cve-scores