CVE-2014-9450

Zabbix frontend chart_bar.php contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the itemid or periods parameters. Affected versions are Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8. The issue is caused by unsafe ...