Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-3628.
PoCs published by Metasploit, including Metasploit module exploits/multi/http/zabbix_script_exec.
AI-analyzed exploit summary This Metasploit module exploits an authenticated remote command execution vulnerability in Zabbix by creating a malicious script and executing it on the Zabbix host via a crafted host entry with IP 127.0.0.1.
Description
Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability
Exploits (2)
This Metasploit module exploits an authenticated remote command execution vulnerability in Zabbix by creating a malicious script and executing it on the Zabbix host via a crafted host entry with IP 127.0.0.1.
This Metasploit module exploits an authenticated remote command execution vulnerability in Zabbix by creating and executing malicious scripts or items on the target host. It supports multiple techniques (script/item) and payload types (Unix command, Linux dropper).
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H