{"vulnerability": "CVE-2022-39988", "sightings": [{"uuid": "66810d25-70c1-4df5-9815-1131efb7d2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39988", "type": "seen", "source": "https://t.me/cibsecurity/50912", "content": "\u203c CVE-2022-39988 \u203c\n\nA cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the Service>Templates service_alias parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-06T22:17:04.000000Z"}, {"uuid": "009fb343-abec-400a-96e5-6ee6b227bf06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39988", "type": "seen", "source": "https://t.me/hacking_Attack/71329", "content": "Exploit Collector\nCentreon 22.04.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-xJ4j9VfFswY/WWlvOf_vUlI/AAAAAAAAIMo/D1-kp_Mj10E1aNmsGMS5n6nKC28DofOXwCLcBGAs/s1600/h25.png \nCentreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 69cf7baade94fd5e803782c07bbd53d7ff5f985beb2b08f0768155d0e8d0e38f\n\nDownload\n# Exploit Title: Stored XSS in service_alias parameter in Centreon version 22.04.0\n# Date: 1/10/2022\n# Exploit Author: syad\n# Vendor Homepage: Centreon\n# Software Link: https://download.centreon.com/\n# Version: 22.04.0\n# CVE ID : CVE-2022-39988\n# Tested on: Centos 7\nCentreon 22.04.0 is vulnerable to Stored Cross Site Scripting (XSS) from the function Service -> Templates -> by adding a crafted payload\ninto the service_alias parameter.\ngo to this endpoint -> /centreon/main.get.php?p=60206 -> Service -> Templates -> Click Button \"Add\" and put the crafted payload below on section \"Alias\" and save\n\npayload --> test\">\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:21.324503Z"}, {"uuid": "e4137feb-5bec-4f99-9446-1a70a80d8f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39988", "type": "seen", "source": "https://t.me/hacking_Attack/71329", "content": "Exploit Collector\nCentreon 22.04.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-xJ4j9VfFswY/WWlvOf_vUlI/AAAAAAAAIMo/D1-kp_Mj10E1aNmsGMS5n6nKC28DofOXwCLcBGAs/s1600/h25.png \nCentreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 69cf7baade94fd5e803782c07bbd53d7ff5f985beb2b08f0768155d0e8d0e38f\n\nDownload\n# Exploit Title: Stored XSS in service_alias parameter in Centreon version 22.04.0\n# Date: 1/10/2022\n# Exploit Author: syad\n# Vendor Homepage: Centreon\n# Software Link: https://download.centreon.com/\n# Version: 22.04.0\n# CVE ID : CVE-2022-39988\n# Tested on: Centos 7\nCentreon 22.04.0 is vulnerable to Stored Cross Site Scripting (XSS) from the function Service -> Templates -> by adding a crafted payload\ninto the service_alias parameter.\ngo to this endpoint -> /centreon/main.get.php?p=60206 -> Service -> Templates -> Click Button \"Add\" and put the crafted payload below on section \"Alias\" and save\n\npayload --> test\">\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:36.812307Z"}, {"uuid": "bd56b69b-ee99-48bd-b9d6-e843a811220c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39988", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/71329", "content": "Exploit Collector\nCentreon 22.04.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-xJ4j9VfFswY/WWlvOf_vUlI/AAAAAAAAIMo/D1-kp_Mj10E1aNmsGMS5n6nKC28DofOXwCLcBGAs/s1600/h25.png \nCentreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 69cf7baade94fd5e803782c07bbd53d7ff5f985beb2b08f0768155d0e8d0e38f\n\nDownload\n# Exploit Title: Stored XSS in service_alias parameter in Centreon version 22.04.0\n# Date: 1/10/2022\n# Exploit Author: syad\n# Vendor Homepage: Centreon\n# Software Link: https://download.centreon.com/\n# Version: 22.04.0\n# CVE ID : CVE-2022-39988\n# Tested on: Centos 7\nCentreon 22.04.0 is vulnerable to Stored Cross Site Scripting (XSS) from the function Service -> Templates -> by adding a crafted payload\ninto the service_alias parameter.\ngo to this endpoint -> /centreon/main.get.php?p=60206 -> Service -> Templates -> Click Button \"Add\" and put the crafted payload below on section \"Alias\" and save\n\npayload --> test\">\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T07:00:04.943664Z"}, {"uuid": "5115ac67-a608-418e-a157-6401865783e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39988", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/71329", "content": "Exploit Collector\nCentreon 22.04.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-xJ4j9VfFswY/WWlvOf_vUlI/AAAAAAAAIMo/D1-kp_Mj10E1aNmsGMS5n6nKC28DofOXwCLcBGAs/s1600/h25.png \nCentreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 69cf7baade94fd5e803782c07bbd53d7ff5f985beb2b08f0768155d0e8d0e38f\n\nDownload\n# Exploit Title: Stored XSS in service_alias parameter in Centreon version 22.04.0\n# Date: 1/10/2022\n# Exploit Author: syad\n# Vendor Homepage: Centreon\n# Software Link: https://download.centreon.com/\n# Version: 22.04.0\n# CVE ID : CVE-2022-39988\n# Tested on: Centos 7\nCentreon 22.04.0 is vulnerable to Stored Cross Site Scripting (XSS) from the function Service -> Templates -> by adding a crafted payload\ninto the service_alias parameter.\ngo to this endpoint -> /centreon/main.get.php?p=60206 -> Service -> Templates -> Click Button \"Add\" and put the crafted payload below on section \"Alias\" and save\n\npayload --> test\">\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:54.984286Z"}]}