Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-3435
HistoryAug 15, 2012 - 8:55 p.m.

CVE-2012-3435

2012-08-1520:55:03
CWE-89
[email protected]
web.nvd.nist.gov
31
cve-2012-3435
sql injection
zabbix
remote execution
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.2%

JSON

SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.

Affected configurations

NVD
Node
zabbixzabbixRange≤1.8.15rc1
OR
zabbixzabbixMatch1.1
OR
zabbixzabbixMatch1.1beta10
OR
zabbixzabbixMatch1.1beta11
OR
zabbixzabbixMatch1.1beta12
OR
zabbixzabbixMatch1.1beta2
OR
zabbixzabbixMatch1.1beta3
OR
zabbixzabbixMatch1.1beta4
OR
zabbixzabbixMatch1.1beta5
OR
zabbixzabbixMatch1.1beta6
OR
zabbixzabbixMatch1.1beta7
OR
zabbixzabbixMatch1.1beta8
OR
zabbixzabbixMatch1.1beta9
OR
zabbixzabbixMatch1.1.1
OR
zabbixzabbixMatch1.1.2
OR
zabbixzabbixMatch1.1.3
OR
zabbixzabbixMatch1.1.4
OR
zabbixzabbixMatch1.1.5
OR
zabbixzabbixMatch1.1.6
OR
zabbixzabbixMatch1.1.7
OR
zabbixzabbixMatch1.3beta
OR
zabbixzabbixMatch1.3.1beta
OR
zabbixzabbixMatch1.3.2beta
OR
zabbixzabbixMatch1.3.3beta
OR
zabbixzabbixMatch1.3.4beta
OR
zabbixzabbixMatch1.3.5beta
OR
zabbixzabbixMatch1.3.6beta
OR
zabbixzabbixMatch1.3.7beta
OR
zabbixzabbixMatch1.3.8beta
OR
zabbixzabbixMatch1.4.2
OR
zabbixzabbixMatch1.4.3
OR
zabbixzabbixMatch1.4.4
OR
zabbixzabbixMatch1.4.5
OR
zabbixzabbixMatch1.4.6
OR
zabbixzabbixMatch1.5beta
OR
zabbixzabbixMatch1.5.1beta
OR
zabbixzabbixMatch1.5.2beta
OR
zabbixzabbixMatch1.5.3beta
OR
zabbixzabbixMatch1.5.4beta
OR
zabbixzabbixMatch1.6
OR
zabbixzabbixMatch1.6.1
OR
zabbixzabbixMatch1.6.2
OR
zabbixzabbixMatch1.6.3
OR
zabbixzabbixMatch1.6.4
OR
zabbixzabbixMatch1.6.5
OR
zabbixzabbixMatch1.6.6
OR
zabbixzabbixMatch1.6.7
OR
zabbixzabbixMatch1.6.8
OR
zabbixzabbixMatch1.6.9
OR
zabbixzabbixMatch1.7
OR
zabbixzabbixMatch1.7.1
OR
zabbixzabbixMatch1.7.2
OR
zabbixzabbixMatch1.7.3
OR
zabbixzabbixMatch1.7.4
OR
zabbixzabbixMatch1.8
OR
zabbixzabbixMatch1.8.1
OR
zabbixzabbixMatch1.8.2
OR
zabbixzabbixMatch1.8.3rc1
OR
zabbixzabbixMatch1.8.3rc2
OR
zabbixzabbixMatch1.8.3rc3
OR
zabbixzabbixMatch2.0.0
OR
zabbixzabbixMatch2.0.0rc1
OR
zabbixzabbixMatch2.0.0rc2
OR
zabbixzabbixMatch2.0.0rc3
OR
zabbixzabbixMatch2.0.0rc4
OR
zabbixzabbixMatch2.0.0rc5
OR
zabbixzabbixMatch2.0.0rc6
OR
zabbixzabbixMatch2.0.1
OR
zabbixzabbixMatch2.0.1rc1
OR
zabbixzabbixMatch2.0.1rc2

Related

prion 1
nvd 1
nessus 5
cvelist 1
dsquare 1
openvas 7
fedora 2
ubuntucve 1
debiancve 1
debian 1
securityvulns 2
gentoo 1
prion
prion
Sql injection
2012-08-15 20:55:00
nvd
nvd
CVE-2012-3435
2012-08-15 20:55:03
nessus
nessus
Debian DSA-2539-1 : zabbix - SQL injection
2012-09-07 00:00:00
Fedora 16 : zabbix-1.8.15-1.fc16 (2012-12488)
2012-08-31 00:00:00
Zabbix Web Interface popup_bitem.php itemid Parameter SQL Injection
2012-10-30 00:00:00
cvelist
cvelist
CVE-2012-3435
2012-08-15 20:00:00
dsquare
dsquare
Zabbix 2.0 SQL Injection
2013-01-13 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2539-1)
2012-09-15 00:00:00
Fedora Update for zabbix FEDORA-2012-12496
2012-09-04 00:00:00
Fedora Update for zabbix FEDORA-2012-12496
2012-09-04 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: zabbix-1.8.15-1.fc17
2012-08-31 01:03:03
[SECURITY] Fedora 16 Update: zabbix-1.8.15-1.fc16
2012-08-31 00:58:11
ubuntucve
ubuntucve
CVE-2012-3435
2012-08-15 00:00:00
debiancve
debiancve
CVE-2012-3435
2012-08-15 20:55:03
debian
debian
[SECURITY] [DSA 2539-1] zabbix security update
2012-09-06 08:32:47
securityvulns
securityvulns
[SECURITY] [DSA 2539-1] zabbix security update
2012-09-07 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2012-09-07 00:00:00
gentoo
gentoo
Zabbix: Multiple vulnerabilities
2013-11-25 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.2%

JSON
Related for CVE-2012-3435
prion1nvd1nessus5cvelist1dsquare1openvas7fedora2ubuntucve1debiancve1debian1securityvulns2gentoo1