Description

Zabbix 2.0.8 is vulnerable to an SQL injection vulnerability, which may allow an attacker to execute malicious SQL statements that control a web application's database server.

Remediation

Upgrade to the latest version of Zabbix.

References

SEC Consult Vulnerability Lab Security Advisory 20131004-0

SQL injection vulnerabilities in the API and frontend

CVE-2013-5743

Related Vulnerabilities

WordPress Plugin WP-PostRatings '[ratings]' Shortcode SQL Injection (1.61)

WordPress Plugin Yoast SEO SQL Injection (1.7.3.3)

WordPress Plugin Adicon Server SQL Injection (1.2)

WordPress Plugin Event Registration 'id' Parameter SQL Injection (5.43)

WordPress 'paged' Parameter SQL Injection Vulnerability (2.0.2 - 2.0.5)

Severity

High

Classification

CVE-2013-5743 CWE-89 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Tags

SQL Injection