Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-4499.
AI-analyzed exploit summary This is a technical writeup detailing multiple vulnerabilities in Zabbix Server, including remote command execution, SQL injection, and denial-of-service (NULL dereference) flaws. It references faulty source code functions, changelog entries, and patched versions.
Description
SQL injection vulnerability in the get_history_lastid function in the nodewatcher component in Zabbix Server before 1.6.8 allows remote attackers to execute arbitrary SQL commands via a crafted request, possibly related to the send_history_last_id function in zabbix_server/trapper/nodehistory.c.
Exploits (1)
This is a technical writeup detailing multiple vulnerabilities in Zabbix Server, including remote command execution, SQL injection, and denial-of-service (NULL dereference) flaws. It references faulty source code functions, changelog entries, and patched versions.