Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-810

Input validation in sysmap.php

    XMLWordPrintable

    Details

    • Type: Incident report
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.6
    • Fix Version/s: None
    • Component/s: Frontend (F)
    • Labels:
      None
    • Environment:
      Any

      Description

      In Configuration->Maps, user could insert an image without associate it to an host id(elementid). After database insertion of those new image, zabbix dosen't display the maps because the user aren't permision on host 0. Normaly, application may insert an image without associated host, only and only if she has the type of 4.
      I address this bug modifing the file maps.inc.php, adding the line

      if(($elementid == 0) and ($elementtype != 4)) return FALSE;

      to function add_element_to_sysmap .

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              alexandru.ticlea Alexandru Ticlea
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: