Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-3435. PoCs published by muts.
AI-analyzed exploit summary This Python script exploits a SQL injection vulnerability in Zabbix 2.0.1 to extract session IDs, which can then be used to bypass authentication and access the scripts.php interface. The exploit demonstrates the ability to escalate privileges by executing arbitrary scripts with 'zabbix' permissions.
Description
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
Exploits (1)
This Python script exploits a SQL injection vulnerability in Zabbix 2.0.1 to extract session IDs, which can then be used to bypass authentication and access the scripts.php interface. The exploit demonstrates the ability to escalate privileges by executing arbitrary scripts with 'zabbix' permissions.