Summary
The host is installed with Zabbix
and is prone to multiple SQL injection vulnerabilities.
Impact
Successful exploitation will allow
attackers to manipulate SQL queries by injecting arbitrary SQL code.
Impact Level: Application
Solution
Upgrade to Zabbix version 1.8.22 or
2.0.14 or 2.2.8 or later. For updates refer to https://www.zabbix.com
Insight
Multiple flaws exist as input passed via
the 'periods' and 'itemid' GET parameter to chart_bar.php is not properly sanitised before being used in an SQL query
Affected
Zabbix versions before 1.8.22, 2.0.x
before 2.0.14, and 2.2.x before 2.2.8.
Detection
Get the installed version of Zabbix
with the help of detect NVT and check the version is vulnerable or not.
References
Severity
Classification
-
CVE CVE-2014-9450 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities