CVE-2010-5049

SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the navtime parameter...

CVE-2010-5049

The CVE-2010-5049 entry describes a SQL injection in Zabbix, reported for versions 1.8.1 and earlier, exploitable via the nav_time parameter in events.php. The underlying issue is improper input handling leading to arbitrary SQL execution on remote systems. Affected software/component: Zabbix (ev...