874anthony/CVE-2024-42327_Zabbix_SQLi

PoC

This is for educational porpuses only. Please do not use agains unathorized systems.

view exploit source poc_in_githubauthor 874anthonypublished 2025-04-18catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-42327US	—	79.1% (100th)	Exploit	2024-11-27
A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.