getStats.php in Centreon Web before 2.8.28 allows authenticated attackers to execute arbitrary code via the ns_id parameter.

Published Oct 8, 2019 · Updated Aug 5, 2024 · Assigned by mitre