CVE-2012-3435

SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.

• CWE-89

• http://git.zabbixzone.com/zabbix2.0/.git/commitdiff/333a3a5542ba8a2c901c24b7bf5440f41f1f4f54Exploit, Patch
• http://osvdb.org/84127
• http://secunia.com/advisories/49809Vendor Advisory
• http://secunia.com/advisories/50475
• http://www.debian.org/security/2012/dsa-2539
• http://www.exploit-db.com/exploits/20087Exploit
• http://www.openwall.com/lists/oss-security/2012/07/27/6
• http://www.openwall.com/lists/oss-security/2012/07/28/3
• http://www.securityfocus.com/bid/54661Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77195
• https://support.zabbix.com/browse/ZBX-5348
• http://git.zabbixzone.com/zabbix2.0/.git/commitdiff/333a3a5542ba8a2c901c24b7bf5440f41f1f4f54Exploit, Patch
• http://osvdb.org/84127
• http://secunia.com/advisories/49809Vendor Advisory
• http://secunia.com/advisories/50475
• http://www.debian.org/security/2012/dsa-2539
• http://www.exploit-db.com/exploits/20087Exploit
• http://www.openwall.com/lists/oss-security/2012/07/27/6
• http://www.openwall.com/lists/oss-security/2012/07/28/3
• http://www.securityfocus.com/bid/54661Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77195
• https://support.zabbix.com/browse/ZBX-5348

Published

Aug 15, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3429The dns_to_ldap_dn_escape function in src/ldap_convert.c in …
• CVE-2012-3430The rds_recvmsg function in net/rds/recv.c in the Linux kern…
• CVE-2012-3431The Teiid Java Database Connectivity (JDBC) socket, as used …
• CVE-2012-3432The handle_mmio function in arch/x86/hvm/io.c in the MMIO op…
• CVE-2012-3433Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a…
• CVE-2012-3434Multiple cross-site scripting (XSS) vulnerabilities in userp…
• CVE-2012-3436OpenTTD 0.6.0 through 1.2.1 does not properly validate reque…
• CVE-2012-3437The Magick_png_malloc function in coders/png.c in ImageMagic…
• CVE-2012-3438The Magick_png_malloc function in coders/png.c in GraphicsMa…
• CVE-2012-3439Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-3440A certain Red Hat script for sudo 1.7.2 on Red Hat Enterpris…
• CVE-2012-3441The database creation script (module/idoutils/db/scripts/cre…