{"vulnerability": "cve-2022-36194", "sightings": [{"uuid": "20ef4756-54d9-4bdf-8f83-2aeada6c2c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36194", "type": "published-proof-of-concept", "source": "https://t.me/poxek/2420", "content": "#Linux #CVE\n\nCentreon 22.04.0 Cross Site Scripting\nCVE-2022-36194\n\nGo to this endpoint -> /centreon/main.get.php?p=60909 -> Pollers -> Broker Configuration -> Click Button \"Add\" and put the crafted payload below on section \"Name\" and save\n\npayload -->  test\">", "creation_timestamp": "2022-09-01T09:01:45.000000Z"}, {"uuid": "8335090c-da20-4dba-8ce0-72a973ae141e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36194", "type": "seen", "source": "https://t.me/hacking_Attack/66781", "content": "Exploit Collector\nCentreon 22.04.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nCentreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 3d70a278906238ba02b36becf352ebf454b3dd1b330a5747bf3dbac98c1a8336\n\nDownload\n# Exploit Title: Stored XSS in name parameter in Centreon version 22.04.0\n# Date: \n# Exploit Author: syad, yunaranyancat, saitamang\n# Vendor Homepage: Centreon\n# Software Link: https://download.centreon.com/\n# Version: 22.04.0\n# CVE ID : CVE-2022-36194\n# Tested on: Centos 7\n\nCentreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload\ninto the name parameter.\ngo to this endpoint -> /centreon/main.get.php?p=60909 -> Pollers -> Broker Configuration -> Click Button \"Add\" and put the crafted payload below on section \"Name\" and save\n\npayload --> test\">\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:25.619136Z"}, {"uuid": "396a6997-92a7-4d25-8ec0-6f1730081ea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36194", "type": "seen", "source": "https://t.me/hacking_Attack/66781", "content": "Exploit Collector\nCentreon 22.04.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nCentreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 3d70a278906238ba02b36becf352ebf454b3dd1b330a5747bf3dbac98c1a8336\n\nDownload\n# Exploit Title: Stored XSS in name parameter in Centreon version 22.04.0\n# Date: \n# Exploit Author: syad, yunaranyancat, saitamang\n# Vendor Homepage: Centreon\n# Software Link: https://download.centreon.com/\n# Version: 22.04.0\n# CVE ID : CVE-2022-36194\n# Tested on: Centos 7\n\nCentreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload\ninto the name parameter.\ngo to this endpoint -> /centreon/main.get.php?p=60909 -> Pollers -> Broker Configuration -> Click Button \"Add\" and put the crafted payload below on section \"Name\" and save\n\npayload --> test\">\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:39.912691Z"}, {"uuid": "14129593-e76e-4eb6-a922-d362f2298b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36194", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/66781", "content": "Exploit Collector\nCentreon 22.04.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nCentreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 3d70a278906238ba02b36becf352ebf454b3dd1b330a5747bf3dbac98c1a8336\n\nDownload\n# Exploit Title: Stored XSS in name parameter in Centreon version 22.04.0\n# Date: \n# Exploit Author: syad, yunaranyancat, saitamang\n# Vendor Homepage: Centreon\n# Software Link: https://download.centreon.com/\n# Version: 22.04.0\n# CVE ID : CVE-2022-36194\n# Tested on: Centos 7\n\nCentreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload\ninto the name parameter.\ngo to this endpoint -> /centreon/main.get.php?p=60909 -> Pollers -> Broker Configuration -> Click Button \"Add\" and put the crafted payload below on section \"Name\" and save\n\npayload --> test\">\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T11:00:04.319119Z"}]}