NVD

Id
45030  
Name
CVE-2012-3435  
Description
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-15  
Modified Date
2013-03-21  
Seq
2012-3435  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225752 45030 CVE-2012-3435 http://git.zabbixzone.com/zabbix2.0/.git/commitdiff/333a3a5542ba8a2c901c24b7bf5440f41f1f4f54  View
225753 45030 CVE-2012-3435 DSA-2539  View
225754 45030 CVE-2012-3435 20087  View
225755 45030 CVE-2012-3435 [oss-security] 20120727 Zabbix SQL injection flaw (CVE request)  View
225756 45030 CVE-2012-3435 [oss-security] 20120728 Re: Zabbix SQL injection flaw (CVE request)  View
225757 45030 CVE-2012-3435 54661  View
225758 45030 CVE-2012-3435 zabbix-popupbitem-sql-injection(77195)  View
225759 45030 CVE-2012-3435 https://support.zabbix.com/browse/ZBX-5348  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28001 JVNDB-2012-003708 Zabbix の frontends/php/popup_bitem.php における SQL インジェクションの脆弱性 Zabbix の frontends/php/popup_bitem.php には、SQL インジェクションの脆弱性が存在します。 CVE-2012-3435 56673 CVE-2012-3435 45030 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003708.html 2012-07-18 2012-11-15 View