Lucene search
China National Vulnerability DatabaseCNVD-2022-57819HistoryApr 01, 2022 - 12:00 a.m.
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57819)
2022-04-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
zoneminder
video surveillance
cross-site scripting
vulnerability
html
javascript
remote attacker
options.php
EPSS
0.001
Percentile
24.8%
ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and earlier versions, which stems from the options.php file not validating the values of ‘WEB_TITLE, HOME_URL’, ’ HOME_CONTENT’ or ‘WEB_CONSOLE_BANNER’ values, a remote attacker could use this vulnerability to execute HTML or JavaScript code.
Related
debiancve
debiancve
CVE-2019-7345
2019-02-04 19:29:01
cvelist
cvelist
CVE-2019-7345
2019-02-04 19:00:00
ubuntucve
ubuntucve
CVE-2019-7345
2019-02-04 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2021-09-30 05:57:22
prion
prion
Cross site scripting
2019-02-04 19:29:00
alpinelinux
alpinelinux
CVE-2019-7345
2019-02-04 19:29:01
nvd
nvd
CVE-2019-7345
2019-02-04 19:29:01
osv
osv
CVE-2019-7345
2019-02-04 19:29:01
cve
cve
CVE-2019-7345
2019-02-04 19:29:01
openvas
openvas
ZoneMinder < 1.34.0 Multiple Vulnerabilities
2019-02-05 00:00:00