Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114564. PoCs published by 1n3.
AI-analyzed exploit summary The document describes a SQL injection vulnerability in Zabbix 2.2.x and 3.0.x, where the toggle_ids array in latest.php is not properly sanitized. An authenticated attacker (or guest user) can exploit this to gain full database access, potentially leading to privilege escalation or command execution on the underlying system.
Description
Zabbix 2.2.x/3.0.x - SQL Injection
Exploits (1)
The document describes a SQL injection vulnerability in Zabbix 2.2.x and 3.0.x, where the toggle_ids array in latest.php is not properly sanitized. An authenticated attacker (or guest user) can exploit this to gain full database access, potentially leading to privilege escalation or command execution on the underlying system.