SQL Injection Vulnerability in zabbix

zabbix is an open source enterprise performance monitoring solution. A SQL injection vulnerability exists in the insert method of the profileIdx2 parameter in zabbix's jsrpc. An attacker can log in to the zabbix management system without authorization, and can also directly obtain operational...