Total vulnerabilities in the database
Multiple cross-site scripting (XSS) vulnerabilities in the formatQuery function in frontends/php/include/classes/class.curl.php in Zabbix before 1.8.3rc1 allow remote attackers to inject arbitrary web script or HTML via the (1) filter_set, (2) show_details, (3) filter_rst, or (4) txt_select parameters to the triggers page (tr_status.php). NOTE: some of these details are obtained from third party information.
| Software | From | Fixed in |
|---|---|---|
| zabbix / zabbix | 1.6.1 | 1.6.1.x |
| zabbix / zabbix | 1.1-beta2 | 1.1-beta2.x |
| zabbix / zabbix | 1.1.2 | 1.1.2.x |
| zabbix / zabbix | 1.7.4 | 1.7.4.x |
| zabbix / zabbix | 1.5.3-beta | 1.5.3-beta.x |
| zabbix / zabbix | 1.1.4 | 1.1.4.x |
| zabbix / zabbix | 1.1.6 | 1.1.6.x |
| zabbix / zabbix | 1.4.3 | 1.4.3.x |
| zabbix / zabbix | 1.6.5 | 1.6.5.x |
| zabbix / zabbix | 1.4.6 | 1.4.6.x |
| zabbix / zabbix | 1.6.8 | 1.6.8.x |
| zabbix / zabbix | 1.1-beta4 | 1.1-beta4.x |
| zabbix / zabbix | 1.7.1 | 1.7.1.x |
| zabbix / zabbix | 1.4.4 | 1.4.4.x |
| zabbix / zabbix | 1.5.1-beta | 1.5.1-beta.x |
| zabbix / zabbix | 1.1 | 1.1.x |
| zabbix / zabbix | 1.3.7-beta | 1.3.7-beta.x |
| zabbix / zabbix | 1.7.2 | 1.7.2.x |
| zabbix / zabbix | 1.8 | 1.8.x |
| zabbix / zabbix | 1.6.3 | 1.6.3.x |
| zabbix / zabbix | 1.1-beta3 | 1.1-beta3.x |
| zabbix / zabbix | 1.3.1-beta | 1.3.1-beta.x |
| zabbix / zabbix | 1.3.2-beta | 1.3.2-beta.x |
| zabbix / zabbix | 1.6.2 | 1.6.2.x |
| zabbix / zabbix | 1.7 | 1.7.x |
| zabbix / zabbix | 1.3.5-beta | 1.3.5-beta.x |
| zabbix / zabbix | 1.1.7 | 1.1.7.x |
| zabbix / zabbix | 1.6 | 1.6.x |
| zabbix / zabbix | 1.6.7 | 1.6.7.x |
| zabbix / zabbix | 1.6.4 | 1.6.4.x |
| zabbix / zabbix | 1.1-beta9 | 1.1-beta9.x |
| zabbix / zabbix | 1.1-beta10 | 1.1-beta10.x |
| zabbix / zabbix | 1.3.8-beta | 1.3.8-beta.x |
| zabbix / zabbix | 1.7.3 | 1.7.3.x |
| zabbix / zabbix | 1.1-beta6 | 1.1-beta6.x |
| zabbix / zabbix | 1.3.6-beta | 1.3.6-beta.x |
| zabbix / zabbix | 1.5.4-beta | 1.5.4-beta.x |
| zabbix / zabbix | 1.1.1 | 1.1.1.x |
| zabbix / zabbix | 1.1-beta8 | 1.1-beta8.x |
| zabbix / zabbix | 1.1-beta11 | 1.1-beta11.x |
| zabbix / zabbix | 1.1-beta7 | 1.1-beta7.x |
| zabbix / zabbix | 1.1.3 | 1.1.3.x |
| zabbix / zabbix | 1.8.1 | 1.8.1.x |
| zabbix / zabbix | 1.6.6 | 1.6.6.x |
| zabbix / zabbix | 1.6.9 | 1.6.9.x |
| zabbix / zabbix | 1.4.5 | 1.4.5.x |
| zabbix / zabbix | 1.3.4-beta | 1.3.4-beta.x |
| zabbix / zabbix | 1.1-beta5 | 1.1-beta5.x |
| zabbix / zabbix | 1.5-beta | 1.5-beta.x |
| zabbix / zabbix | 1.4.2 | 1.4.2.x |
| zabbix / zabbix | 1.1-beta12 | 1.1-beta12.x |
| zabbix / zabbix | 1.1.5 | 1.1.5.x |
| zabbix / zabbix | - | 1.8.2.x |
| zabbix / zabbix | 1.5.2-beta | 1.5.2-beta.x |
| zabbix / zabbix | 1.3.3-beta | 1.3.3-beta.x |
| zabbix / zabbix | 1.3-beta | 1.3-beta.x |