Description
popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://support.zabbix.com/browse/ZBX-3840 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066092.html ↗
- http://www.securityfocus.com/bid/49277 ↗
- https://support.zabbix.com/browse/ZBX-3955 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69376 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066110.html ↗