{"uuid": "e4137feb-5bec-4f99-9446-1a70a80d8f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39988", "type": "seen", "source": "https://t.me/hacking_Attack/71329", "content": "Exploit Collector\nCentreon 22.04.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-xJ4j9VfFswY/WWlvOf_vUlI/AAAAAAAAIMo/D1-kp_Mj10E1aNmsGMS5n6nKC28DofOXwCLcBGAs/s1600/h25.png \nCentreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 69cf7baade94fd5e803782c07bbd53d7ff5f985beb2b08f0768155d0e8d0e38f\n\nDownload\n# Exploit Title: Stored XSS in service_alias parameter in Centreon version 22.04.0\n# Date: 1/10/2022\n# Exploit Author: syad\n# Vendor Homepage: Centreon\n# Software Link: https://download.centreon.com/\n# Version: 22.04.0\n# CVE ID : CVE-2022-39988\n# Tested on: Centos 7\nCentreon 22.04.0 is vulnerable to Stored Cross Site Scripting (XSS) from the function Service -> Templates -> by adding a crafted payload\ninto the service_alias parameter.\ngo to this endpoint -> /centreon/main.get.php?p=60206 -> Service -> Templates -> Click Button \"Add\" and put the crafted payload below on section \"Alias\" and save\n\npayload --> test\">\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:36.812307Z"}