Description

Zabbix 2.0.8 is vulnerable to an SQL injection vulnerability, which may allow an attacker to execute malicious SQL statements that control a web application's database server.

Remediation

Upgrade to the latest version of Zabbix.

References

SEC Consult Vulnerability Lab Security Advisory 20131004-0

SQL injection vulnerabilities in the API and frontend

CVE-2013-5743

Related Vulnerabilities

WordPress Plugin 301 Redirects-Easy Redirect Manager SQL Injection (2.50)

WordPress Plugin Ultimate Membership Pro SQL Injection (6.4)

WordPress Plugin WP Statistics SQL Injection (12.0.7)

WordPress Plugin Simple Ads Manager SQL Injection (2.9.4.116)

WordPress Plugin Events SQL Injection (2.3.4)

Severity

High

Classification

CVE-2013-5743 CWE-89 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

SQL Injection