.. / CVE-2016-10134

• SQLi
• Nuclei
• Web

Exploit for Zabbix - SQL Injection (CVE-2016-10134)

Description:

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php and perform SQL injection attacks.

Nuclei Template

View the template here CVE-2016-10134.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2016/CVE-2016-10134.yaml

References: