Описание
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
Ссылки
- ExploitPatch
- Vendor Advisory
- Exploit
- Exploit
- ExploitPatch
- Vendor Advisory
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1Версия до 1.8.15 (включая)
Одно из
cpe:2.3:a:zabbix:zabbix:*:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta10:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta11:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta12:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta3:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta4:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta5:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta6:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta7:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta8:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1:beta9:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.1.7:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.3:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.3.1:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.3.2:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.3.3:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.3.4:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.3.5:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.3.6:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.3.7:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.3.8:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.5:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.5.1:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.5.2:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.5.3:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.5.4:beta:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.6:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.6.2:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.6.3:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.6.4:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.6.5:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.6.6:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.6.7:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.6.8:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.6.9:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.7:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.7.1:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.7.2:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.7.3:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.7.4:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.3:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.3:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.3:rc3:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc3:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc4:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc5:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc6:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.1:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.1:rc2:*:*:*:*:*:*
EPSS
Процентиль: 86%
0.02759
Низкий
7.5 High
CVSS2
Дефекты
CWE-89
Связанные уязвимости
ubuntu
больше 13 лет назад
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
debian
больше 13 лет назад
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix ...
github
больше 3 лет назад
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
EPSS
Процентиль: 86%
0.02759
Низкий
7.5 High
CVSS2
Дефекты
CWE-89