PATCH: database escaping, security breach

Petya

Member

Joined: Dec 2007

Posts: 37
#1

PATCH: database escaping, security breach

15-07-2008, 14:04

Trivial typo, may cause severe problems (user can inject
arbutrary sql including `delete from history, etc.)

Patch against current trunk.
Attached Files

zabbix-DBupdate_graph-typo.patch (669 Bytes, 438 views)
Tags: None
Sasha

Zabbix developer

Joined: Sep 2007

Posts: 60
#2

16-07-2008, 10:52

Thank you for the patch. It is registered as ZBX-389 in our support system.

ZABBIX Developer
Riga, Latvia
Comment
Sasha

Zabbix developer

Joined: Sep 2007

Posts: 60
#3

16-07-2008, 11:00

Problem fixed in revision 5830. Thank you!

ZABBIX Developer
Riga, Latvia
Comment

Ad Widget