CVE-2026-23921

CVE-2026-23921 — Zabbix 시간 기반 블라인드 SQL 인젝션 영향받는 버전: Zabbix 50 THEN pgsleep3 ELSE pgsleep0 END-- 사용법 PostgreSQL 백엔드 기본값 python exploitCVE-2026-23921.py \ --url http://TARGET/apijsonrpc.php \ --user Admin --password zabbix --db pgsql MySQL 백엔드 python exploitCVE-2026-23921.py \ --url...

Blind SQL Injection

Zabbix is vulnerable to blind SQL injection. The vulnerability is due to improper sanitization of the sortfield parameter in include/classes/api/CApiService.php, which allows a low-privileged user with API access to execute arbitrary SQL select queries and exfiltrate database data through...

DEBIAN-CVE-2024-36465

A low privilege regular Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter...