CVE-2011-3265

popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary...

5.0 MediumFix available

popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.

Exploit likelihood

1.47%Up 0.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.

Record: CVE-2011-3265
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.

Record: CVE-2011-3265
Updated: 2026-11-02

EUVDEUVD-2011-3229 No score

popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.

Record: EUVD-2011-3229
Updated: 2026-11-03

GitHub AdvisoriesGHSA-53rv-m76f-83xc No score

popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary...

popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.

Record: GHSA-53rv-m76f-83xc
Weakness: CWE-200
Updated: 2026-11-02

OSV No score

popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.

Record: CVE-2011-3265
Updated: 2026-11-02

OSVDEBIAN-CVE-2011-3265 No score

popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.

Record: DEBIAN-CVE-2011-3265
Updated: 2026-11-02

Affected products

zabbix

Affected packages

Affected packages
Package	Affected	Fixed
`zabbix` Debian:12	before 1:1.8.9-1	1:1.8.9-1
`zabbix` Debian:13	before 1:1.8.9-1	1:1.8.9-1
`zabbix` Debian:14	before 1:1.8.9-1	1:1.8.9-1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-3265 is a medium vulnerability (CVSS 5.0) in Zabbix, published August 19, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in zabbix 1:1.8.9-1.

Exploit likelihood

What each source reports

Affected products

Affected packages

History

In short

References