CVE-2010-5049
SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the nav_time parameter.
Date published : 2011-11-22
http://www.securityfocus.com/bid/39752
http://www.securityfocus.com/archive/1/511454/100/0/threaded