PT-2025-14375 · Zabbix +3 · Zabbix +3

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: A low privilege Zabbix user with API access can use a SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter...

Zabbix <= 1.8.1 SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Zabbix =0' ORDER BY e.clock DESC LIMIT 1001 OFFSET 0 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' ORDER BY...

Zabbix &lt;= 1.8.1 SQL Injection

============================================= - Release date: April 1st, 2010 - Discovered by: Dawid Golunski - Severity: High ============================================= I. VULNERABILITY ------------------------- Zabbix = 1.8.1 SQL Injection II. BACKGROUND ------------------------- Zabbix is a...