Zabbix · Zabbix · CVE-2014-9450
**Name of the Vulnerable Software and Affected Versions**
Zabbix versions prior to 1.8.22
Zabbix versions 2.0.x prior to 2.0.14
Zabbix versions 2.2.x prior to 2.2.8
**Description**
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `itemid` or `periods` parameter in the chart bar.php file in the frontend.
**Recommendations**
For Zabbix versions prior to 1.8.22, update to version 1.8.22 or later.
For Zabbix versions 2.0.x prior to 2.0.14, update to version 2.0.14 or later.
For Zabbix versions 2.2.x prior to 2.2.8, update to version 2.2.8 or later.