Description
Zabbix 是一个企业级分布式开源监控解决方案。Zabbix 软件能够监控众多网络参数和服务器的健康度、完整性。Zabbix 使用灵活的告警机制，允许用户为几乎任何事件配置基于邮件的告警。这样用户可以快速响应服务器问题。Zabbix 基于存储的数据提供出色的报表和数据可视化功能
Zabbix /zabbix/popup_bitem SQL 注入漏洞（CVE-2012-3435）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2012-3435
https://www.cve.org/CVERecord?id=CVE-2012-3435
https://exchange.xforce.ibmcloud.com/vulnerabilities/77195
https://access.redhat.com/security/cve/cve-2012-3435
https://security-tracker.debian.org/tracker/CVE-2012-3435
https://www.tenable.com/plugins/nessus/62757
https://www.tenablecloud.cn/plugins/nessus/62757
https://stack.chaitin.com/vuldb/detail/b9eb6b7c-1440-4c7d-a94e-9d31c9006712
https://www.nsfocus.net/vulndb/20504
https://avd.aliyun.com/detail?id=AVD-2012-3435
https://bugs.gentoo.org/show_bug.cgi?id=428372
https://github.com/advisories/ghsa-w8xh-986v-xwgh
https://www.thehackerwire.com/vulnerability/CVE-2012-3435/
https://cve.yack.one/cve/CVE-2012-3435
https://echelongraph.io/pulse/CVE-2012-3435
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3435
https://seclists.org/oss-sec/2012/q3/127
https://www.openwall.com/lists/oss-security/2012/07/28/3
https://vulners.com/circl/CIRCL:CVE-2012-3435