PatchTheCVE: merethishttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2014-3829: displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) alhttps://patchthecve.com/cve/CVE-2014-3829.htmlhttps://patchthecve.com/cve/CVE-2014-3829.htmlWed, 17 Jun 2026 00:08:59 +0000HIGH 10.0: displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.CVE-2014-3828: Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreonhttps://patchthecve.com/cve/CVE-2014-3828.htmlhttps://patchthecve.com/cve/CVE-2014-3828.htmlWed, 17 Jun 2026 00:08:59 +0000HIGH 10.0: Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter to views/graphs/GetXCVE-2012-5967: SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allhttps://patchthecve.com/cve/CVE-2012-5967.htmlhttps://patchthecve.com/cve/CVE-2012-5967.htmlTue, 16 Jun 2026 23:47:39 +0000MEDIUM 6.5: SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via the menu parameter.