Description
Zabbix 2.2.14以及之前的版本，3.0.4以及之前的3.0版本中存在SQL注入漏洞。远程攻击者可通过latest.php请求中的toggle_ids参数执行任意SQL命令。
Zabbix CVE-2016-10134 SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2016-10134
https://www.cve.org/CVERecord?id=CVE-2016-10134
https://security-tracker.debian.org/tracker/CVE-2016-10134
https://ubuntu.com/security/CVE-2016-10134
https://github.com/vulhub/vulhub/blob/master/zabbix/CVE-2016-10134/README.md
https://sploitus.com/exploit?id=5C6D5A9B-1412-5131-809C-6312C7E86FAD
https://security.snyk.io/vuln/SNYK-UNMANAGED-ZABBIXZABBIX-2364962
https://www.cnblogs.com/cute-puli/p/15659959.html