CVE-2012-3435
N/A
Published: August 15, 2012 at 08:00 PM UTC
Updated: June 16, 2026 at 11:43 PM UTC
1 product affected across 1 vendorZabbix
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.8.151.11.1 beta101.1 beta111.1 beta121.1 beta21.1 beta31.1 beta41.1 beta51.1 beta61.1 beta71.1 beta81.1 beta91.1.11.1.21.1.31.1.41.1.51.1.61.1.71.3 beta1.3.1 beta1.3.2 beta1.3.3 beta1.3.4 beta1.3.5 beta1.3.6 beta1.3.7 beta1.3.8 beta1.4.21.4.31.4.41.4.51.4.61.5 beta1.5.1 beta1.5.2 beta1.5.3 beta1.5.4 beta1.61.6.11.6.21.6.31.6.41.6.51.6.61.6.71.6.81.6.91.71.7.11.7.21.7.31.7.41.81.8.11.8.21.8.3 rc11.8.3 rc21.8.3 rc32.0.02.0.0 rc12.0.0 rc22.0.0 rc32.0.0 rc42.0.0 rc52.0.0 rc62.0.12.0.1 rc12.0.1 rc2rc1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (11)
x_refsource_CONFIRMExploitPatch
Source: [email protected]
http://git.zabbixzone.com/zabbix2.0/.git/commitdiff/333a3a5542ba8a2c901c24b7bf5440f41f1f4f54Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/49809Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2012/dsa-2539Mailing Listx_refsource_MLIST
Source: [email protected]
http://www.openwall.com/lists/oss-security/2012/07/27/6Mailing Listx_refsource_MLIST
Source: [email protected]
http://www.openwall.com/lists/oss-security/2012/07/28/3Quick Info
StatusMODIFIED
CWE
CWE-89
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card