CVE-2010-1277

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2010-04/0001.html · Exploit
• legalhackers.com/advisories/zabbix181api-sql.txt · Exploit
• legalhackers.com/poc/zabbix181api.pl-poc · Exploit
• secunia.com/advisories/39119 · Vendor Advisory
• osvdb.org/63456
• securityfocus.com/archive/1/510480/100/0/threaded
• securityfocus.com/bid/39148 · Exploit
• vupen.com/english/advisories/2010/0799 · Vendor Advisory
• zabbix.com/rn1.8.2.php · Patch

zabbix のその他の脆弱性

• CVE-2026-59781高 7.8When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory…
• CVE-2026-23938中 4.9An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript…
• CVE-2026-23937中 6.5The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integri…
• CVE-2026-23935中 4.9A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic,…
• CVE-2026-23934中 6.5An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the F…