zoneminder zoneminder 1.32.3 vulnerabilities and exploits

(subscribe to this query)

5.4

CVSSv3

Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page.

Zoneminder Zoneminder 1.32.3

6.1

CVSSv3

skins/classic/views/controlcap.php in ZoneMinder prior to 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter.

Zoneminder Zoneminder

9.8

CVSSv3

daemonControl in includes/functions.php in ZoneMinder prior to 1.32.3 allows command injection via shell metacharacters.

Zoneminder Zoneminder

9.8

CVSSv3

ZoneMinder prior to 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value.

Zoneminder Zoneminder

9.8

CVSSv3

ZoneMinder prior to 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter.

Zoneminder Zoneminder

9.8

CVSSv3

ZoneMinder up to and including 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter.

Zoneminder Zoneminder

6.1

CVSSv3

includes/database.php in ZoneMinder prior to 1.32.3 has XSS in the construction of SQL-ERR messages.

Zoneminder Zoneminder

9.8

CVSSv3

ZoneMinder prior to 1.32.3 has SQL Injection via the ajax/status.php sort parameter.

Zoneminder Zoneminder

6.1

CVSSv3

Reflected Cross Site Scripting (XSS) exists in ZoneMinder up to and including 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SELF'], without applying any proper filtration.

Zoneminder Zoneminder

6.1

CVSSv3

Reflected - Cross Site Scripting (XSS) exists in ZoneMinder up to and including 1.32.3, allowing an malicious user to execute HTML or JavaScript code via a vulnerable 'newMonitor[Method]' parameter value in the view monitor (monitor.php) because proper filtration is omi...

Zoneminder Zoneminder

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook