CVE-2019-17382-EXPLOIT

CVE-2019-17382 - Zabbix 认证绕过 在 Zabbix 版本高达 4.4 中发现的一个严重漏洞。该问题存在于 zabbix.php 文件中，当使用 dashboard.view 动作且 dashboardid=1 时触发。它允许攻击者绕过登录页面，从而未授权访问仪表板创建功能。因此，攻击者无需有效凭据（用户名/密码）即可创建仪表板、报表、屏幕或地图，本质上以匿名方式操作。 漏洞影响 利用此漏洞，可以创建未授权的元素（仪表板/报表/屏幕/地图），这些元素不仅攻击者可以访问，系统内的其他用户和管理员也可以访问。 漏洞识别 通过访问带有以下参数的 zabbix.php...

[SECURITY] [DLA 3538-1] zabbix security update

Debian LTS Advisory DLA-3538-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost August 22, 2023 https://wiki.debian.org/LTS Package : zabbix Version : 1:4.0.4+dfsg-1+deb10u2 CVE ID : CVE-2013-7484 CVE-2019-17382 CVE-2022-35229 CVE-2022-43515 CVE-2023-29450...

Debian: Security Advisory (DLA-3538-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zabbix 3.4.7 Cross Site Scripting

Exploit Title: Zabbix 3.4.7 - Stored XSS Date: 30-03-2021 Exploit Author: Radmil Gazizov Vendor Homepage: https://www.zabbix.com/ Software Link: https://www.zabbix.com/rn/rn3.4.7 Version: 3.4.7 Tested on: Linux Reference - https://github.com/GloryToMoon/POCcodes/blob/main/zabbixstoredxss347.txt 1...

CVE-2019-17382

Summary of CVE-2019-17382 (Zabbix) : Zabbix up to version 4.4 contains an authentication bypass via the URL zabbix.php?action=dashboard.view&dashboardid=1, allowing an attacker to bypass login and anonymously create dashboards, reports, screens, or maps. The created items are then accessible to o...