Exploit for CVE-2019-16663 CVE-2019-16662 CVE-2019-16663

kitploit · 2026-08-27

Description

Official exploit code for Centreon v19.04 RCE via CVE-2019-16662.

Entry point

ParameterrootUname · query param

Path/install/lib/ajaxHandlers/ajaxServerSettingsChk.php

Pre-auth command execution via unsanitized rootUname in ajaxServerSettingsChk.php leading to remote code execution.

Affected Rconfig versions

Rconfig= 3.9.2

All known vulnerabilities by product

CVSS Score

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-27 14:09

Last Seen:2026-08-27 20:15

Reporter:KitPloit

Tags

CentreonRemote Code ExecutionExploit Codev19.04CVE-2019-16662

Other exploits for the same CVE

2026-08-27 KitPloitKITPLOIT

Exploit for CVE-2019-19268

2019-11-25 TheCyberGeekGITHUB

rConfig - install Command Execution Exploit

2019-11-09 metasploitZDTRuby

rConfig - install Command Execution (Metasploit)

2019-11-08 MetasploitEXPLOITDBRuby

rConfig 3.9.2 Command Injection

2019-11-07 Brendan ColesPACKETSTORMRuby

rConfig 3.9.2 - Remote Code Execution Exploit

2019-10-29 AskarZDTPython

rConfig 3.9.2 - Remote Code Execution

2019-10-29 AskarEXPLOITPACKPython

rConfig 3.9.2 - Remote Code Execution

2019-10-29 AskarEXPLOITDBPython

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MHASKAR-CVE-2019-16663
# CVE-2019-16663

Официальный код эксплойта для Centreon v19.04 Remote Code Execution CVE-2019-16662