CVE-2011-3265: Exposure of Sensitive Information to an Unauthorized Actor

popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter...