SQL Injection

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Zabbix - SQL InjectionCVE-2016-10134Zabbix · 83% likely

   CWE-89

2. Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.CVE-2013-5743Zabbix · 80% likely

   CWE-89

3. SQL injection in user.get APICVE-2024-42327Zabbix · CVSS 9.9 · 79% likely

   CWE-89

4. SQL injection in Zabbix APICVE-2024-36465Zabbix · CVSS 8.6 · 40% likely

   CWE-89

5. The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell…CVE-2016-4338Zabbix · 25% likely

   CWE-89

6. Blind, read-only SQL injection in Zabbix API via sortfield parameterCVE-2026-23921Zabbix · CVSS 8.7 · 4.2% likely

   CWE-89

7. SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands vi…CVE-2012-3435Zabbix · 3.6% likely

   CWE-89

8. SQL injection vulnerability in the get_history_lastid function in the nodewatcher component in Zabbix Server before 1.6.8 allows remote attackers to execute arbitrary SQL commands…CVE-2009-4499Zabbix · 2.4% likely

   CWE-89

9. SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to execute arbitrary SQL commands via the onl…CVE-2011-4674Zabbix · 2.4% likely

   CWE-89

10. SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter…CVE-2010-1277Zabbix · 1.7% likely

    CWE-89

11. Multiple SQL injection vulnerabilities in chart_bar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbi…CVE-2014-9450Zabbix · 1.3% likely

    CWE-89

12. Secondary-order SQL injection in Zabbix Server when deleting an autoregistered hostCVE-2025-27240Zabbix · CVSS 7.5 · 1.3% likely

    CWE-89

13. SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the nav_time parameter.CVE-2010-5049Zabbix · 1.1% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.