Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57831
HistoryApr 01, 2022 - 12:00 a.m.

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57831)

2022-04-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
zoneminder
cross-site scripting
vulnerability
1.32.3
remote attackers
exportfile parameter
html
javascript
video surveillance software

EPSS

0.001

Percentile

37.8%

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and earlier versions, which stems from the fact that the program is not properly filtered and can be exploited by remote attackers with the ‘Exportfile’ parameter to execute HTML or JavaScript code.