EDB-10432

functional

Zabbix Server - Multiple Vulnerabilities

view exploit source exploit_dbverifiedtype webappsauthor Nicobpublished 2009-12-14catalog exploit_db
01

exploited CVEs (3)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2009-4501USmedium5.0Exploit
The zbx_get_next_field function in libs/zbxcommon/str.c in Zabbix Server before 1.6.8 allows remote attackers to cause a denial of service (crash) via a request that lacks expected…
CVE-2009-4499UShigh7.5Exploit
SQL injection vulnerability in the get_history_lastid function in the nodewatcher component in Zabbix Server before 1.6.8 allows remote attackers to execute arbitrary SQL commands…
CVE-2009-4498USmedium6.8Exploit
The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan