Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-810

Input validation in sysmap.php

    XMLWordPrintable

Details

    • Incident report
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 1.6
    • None
    • Frontend (F)
    • None
    • Any

    Description

      In Configuration->Maps, user could insert an image without associate it to an host id(elementid). After database insertion of those new image, zabbix dosen't display the maps because the user aren't permision on host 0. Normaly, application may insert an image without associated host, only and only if she has the type of 4.
      I address this bug modifing the file maps.inc.php, adding the line

      if(($elementid == 0) and ($elementtype != 4)) return FALSE;

      to function add_element_to_sysmap .

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              alexandru.ticlea Alexandru Ticlea
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: