Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2014-3005

Disclosure Date: February 01, 2018 (last updated November 26, 2024)
XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
0
0
Attacker Value
Unknown

CVE-2011-5027

Disclosure Date: December 29, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler.
0
0
Attacker Value
Unknown

CVE-2011-4615

Disclosure Date: December 29, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Zabbix before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the gname parameter (aka host groups name) to (1) hostgroups.php and (2) usergrps.php, the update action to (3) hosts.php and (4) scripts.php, and (5) maintenance.php.
0
0
Attacker Value
Unknown

CVE-2011-3265

Disclosure Date: August 19, 2011 (last updated October 04, 2023)
popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.
0
0