Zabbix versions 1.8.x through 2.2.x suffer from an XML external entity attack vulnerability.
58c8a52d7fba50ef0b5bff2b0868272d62ff90398c6d604f69d6a653058e7dcd
Product name:Zabbix
Description:Zabbix is an enterprise-class open source distributed monitoring solution for networks and applications.
Version affected:1.8.x-2.2.x
Type:XML External Entity Attack
Consequence:Arbitrary Local File Read&Potential RCE
Vulnerability Details:http://www.pnigos.com/?p=273
Fix Released:svn://svn.zabbix.com/branches/dev/ZBX-8151-18 r46594 for 1.8svn://svn.zabbix.com/branches/dev/ZBX-8151-20 r46600 for 2.0+
Bug was found by pnig0s @ FreeBuf.Com
==================================================
Best Regards,pnig0s