{"uuid": "8335090c-da20-4dba-8ce0-72a973ae141e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36194", "type": "seen", "source": "https://t.me/hacking_Attack/66781", "content": "Exploit Collector\nCentreon 22.04.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nCentreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 3d70a278906238ba02b36becf352ebf454b3dd1b330a5747bf3dbac98c1a8336\n\nDownload\n# Exploit Title: Stored XSS in name parameter in Centreon version 22.04.0\n# Date: \n# Exploit Author: syad, yunaranyancat, saitamang\n# Vendor Homepage: Centreon\n# Software Link: https://download.centreon.com/\n# Version: 22.04.0\n# CVE ID : CVE-2022-36194\n# Tested on: Centos 7\n\nCentreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload\ninto the name parameter.\ngo to this endpoint -> /centreon/main.get.php?p=60909 -> Pollers -> Broker Configuration -> Click Button \"Add\" and put the crafted payload below on section \"Name\" and save\n\npayload --> test\">\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:25.619136Z"}