2176 matches found
Zabbix 1.8.x < 1.8.3 XSS Vulnerability
Zabbix is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Zabbix Agent - 'net.tcp.listen' Command Injection (Metasploit)
$Id: zabbixagentexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...
Fedora 12 : zabbix-1.6.8-1.fc12 (2010-0266)
Update to 1.6.8 - Upstream changelog: http://www.zabbix.com/rn1.6.8.php - fixes 2 issues from 551331 CVE-2009-4499 - https://support.zabbix.com/browse/ZBX-1031 CVE-2009-4501 - https://support.zabbix.com/browse/ZBX-1355 Note that Tenable Network Security has extracted the preceding description...
Fedora 11 : zabbix-1.6.8-1.fc11 (2010-0278)
Update to 1.6.8 - Upstream changelog: http://www.zabbix.com/rn1.6.8.php - fixes 2 issues from 551331 CVE-2009-4499 - https://support.zabbix.com/browse/ZBX-1031 CVE-2009-4501 - https://support.zabbix.com/browse/ZBX-1355 Note that Tenable Network Security has extracted the preceding description...
SQL injection vulnerability in Zabbix <= 1.8.1
Product: Zabbix Vendor: Zabbix SIA References: http://www.securityfocus.com/bid/39752 http://secunia.com/advisories/39119 Software Link: http://www.zabbix.com/ Vulnerable Version: = 1.8.1 Vulnerability Type: SQL Injection Status: Fixed in version 1.8.2 Risk level: Medium Author: David "skys"...
Zabbix <= 1.8.1 SQLi Vulnerability
Zabbix is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Zabbix 1.8.1 SQL Injection
Exploit Title: Zabbix =0' ORDER BY e.clock DESC LIMIT 1001 OFFSET 0 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' ORDER BY e.clock DESC LIMIT 1001 OFFSET 0' at line 1 mysqlfetchassoc: supplied argument is n...
Zabbix <= 1.8.1 SQL Injection Vulnerability
Exploit for php platform in category web applications =========================================== Zabbix =0' ORDER BY e.clock DESC LIMIT 1001 OFFSET 0 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' ORDER BY...
Zabbix 1.8.x < 1.8.2 'DBCondition' Parameter SQL Injection
Binary data 5519.prm...
Zabbix < 1.8.2 SQLi Vulnerability
Zabbix is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
DEBIAN-CVE-2010-1277
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-0751, CVE-2010-1277. Reason: this candidate was intended for one issue, but it was accidentally assigned to two different issues, one for libnids and another for Zabbix. Notes: All CVE users should consult CVE-2010-0751 libni...
Sql injection
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...
CVE-2010-1277
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...
CVE-2010-1277
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...
CVE-2010-1277
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...
CVE-2010-1277
Zabbix 1.8.x before 1.8.2 is affected by an SQL injection in the API’s user.authenticate via the JSON payload to api_jsonrpc.php. The issue allows remote attackers to execute arbitrary SQL commands. Per connected advisories, upgrade to the latest Zabbix package (Gentoo GLSA 201311-15 recommends &...
CVE-2010-1144
This CVE-2010-1144 entry is rejected and not a valid active vulnerability.
CVE-2010-1277
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...
CVE-2010-1277
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...