漏洞描述
Zabbix 2.2.14以及之前的版本，3.0.4以及之前的3.0版本中存在SQL注入漏洞。远程攻击者可通过latest.php请求中的toggle_ids参数执行任意SQL命令。
Zabbix CVE-2016-10134 SQL注入漏洞
PoC代码
暂无相关漏洞推荐
-
Zabbix /api_jsonrpc.php SQL 注入漏洞（CVE-2024-36465） 无POC
2025-09-05 | Zabbixzabbix 是一个基于 Web 界面的提供分布式系统监视以及网络监视功能的企业级的开源解决方案。Zabbix的addRelatedObjects 函数存在一个严重漏洞，只具有访问权... -
CVE-2022-23131: Zabbix - SAML SSO Authentication Bypass POC
2025-09-01 | ZabbixWhen SAML SSO authentication is enabled (non-default), session data can be modified by a malicious a... -
CVE-2022-23134: Zabbix Setup Configuration Authentication Bypass POC
2025-09-01 | ZabbixAfter the initial setup process, some steps of setup.php file are reachable not only by super-admini... -
CVE-2016-3081: Apache S2-032 Struts RCE POC
2025-09-01 | Apache StrutsApache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invo... -
CVE-2016-3088: ActiveMQ Arbitrary File Write Vulnerability (CVE-2016-3088) POC
2025-09-01 | ActiveMQThe Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to uploa...