EDB-39769

PoC

Zabbix Agent 3.0.1 - 'mysql.size' Shell Command Injection

view exploit source exploit_dbtype localauthor Timo Lindforspublished 2016-05-04catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-4338US	high8.1	25.2% (98th)	Exploit	2017-01-23
The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell o…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.