high7.5Public exploit code
CVE-2012-3435
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zabbix 2.0.1 - Session Extractor2012-07-24 · webapps · php · Verified
Impact
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix | through 1.8.15 Versions 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.zabbixzone.com/zabbix2.0/.git/commitdiff/333a3a5542ba8a2c901c24b7bf5440f41f1f4f54
- http://osvdb.org/84127
- http://secunia.com/advisories/49809
- http://secunia.com/advisories/50475
- http://www.debian.org/security/2012/dsa-2539
- http://www.exploit-db.com/exploits/20087
- http://www.openwall.com/lists/oss-security/2012/07/27/6
- http://www.openwall.com/lists/oss-security/2012/07/28/3
- http://www.securityfocus.com/bid/54661
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77195
- https://support.zabbix.com/browse/ZBX-5348
- http://git.zabbixzone.com/zabbix2.0/.git/commitdiff/333a3a5542ba8a2c901c24b7bf5440f41f1f4f54
- http://osvdb.org/84127
- http://secunia.com/advisories/49809
- http://secunia.com/advisories/50475
- http://www.debian.org/security/2012/dsa-2539
- http://www.exploit-db.com/exploits/20087
- http://www.openwall.com/lists/oss-security/2012/07/27/6
- http://www.openwall.com/lists/oss-security/2012/07/28/3
- http://www.securityfocus.com/bid/54661
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77195
- https://support.zabbix.com/browse/ZBX-5348