Description
Zabbix 3.0.3版本存在SQL注入漏洞。攻击者利用漏洞可注入任意SQL命令，获取网站数据库敏感信息。
Zabbix profileIdx2 参数存在SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://vulapps.evalbug.com/z_zabbix_1/
https://www.cnblogs.com/s0ky1xd/p/5874043.html
https://zhuanlan.zhihu.com/p/66248991
https://xxh.ahtcm.edu.cn/info/1201/6141.htm
https://cloud.tencent.com/developer/article/1090969
https://blog.nsfocus.net/sql-zabbix-analysis-protection-scheme-injection-vulnerability/
https://www.secpulse.com/archives/51168.html
https://seclists.org/fulldisclosure/2016/Aug/79
https://www.lightless.me/archives/zabbix-sql-injection.html
https://www.anquanke.com/post/id/84406
https://github.com/Medicean/VulApps/wiki/%E6%BC%8F%E6%B4%9E%E7%8E%AF%E5%A2%83%E9%80%9F%E6%9F%A5%E5%88%97%E8%A1%A8