Lucene search

K
cveMitreCVE-2008-3881
HistorySep 02, 2008 - 3:41 p.m.

CVE-2008-3881

2008-09-0215:41:00
CWE-79
mitre
web.nvd.nist.gov
20
cve-2008-3881
cross-site scripting
xss
zoneminder
web security

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

60.3%

Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified “zm_html_view_*.php” files.

Affected configurations

Nvd
Node
zoneminderzoneminderRange1.23.3
OR
zoneminderzoneminderMatch0.0.1
OR
zoneminderzoneminderMatch0.9.7
OR
zoneminderzoneminderMatch0.9.8
OR
zoneminderzoneminderMatch0.9.9
OR
zoneminderzoneminderMatch0.9.10
OR
zoneminderzoneminderMatch0.9.11
OR
zoneminderzoneminderMatch0.9.12
OR
zoneminderzoneminderMatch0.9.13
OR
zoneminderzoneminderMatch0.9.14
OR
zoneminderzoneminderMatch0.9.15
OR
zoneminderzoneminderMatch0.9.16
OR
zoneminderzoneminderMatch1.17.0
OR
zoneminderzoneminderMatch1.17.1
OR
zoneminderzoneminderMatch1.17.2
OR
zoneminderzoneminderMatch1.18.0
OR
zoneminderzoneminderMatch1.18.1
OR
zoneminderzoneminderMatch1.19.0
OR
zoneminderzoneminderMatch1.19.1
OR
zoneminderzoneminderMatch1.19.2
OR
zoneminderzoneminderMatch1.19.3
OR
zoneminderzoneminderMatch1.19.4
OR
zoneminderzoneminderMatch1.19.5
OR
zoneminderzoneminderMatch1.20.0
OR
zoneminderzoneminderMatch1.20.1
OR
zoneminderzoneminderMatch1.21.0
OR
zoneminderzoneminderMatch1.21.1
OR
zoneminderzoneminderMatch1.21.2
OR
zoneminderzoneminderMatch1.21.3
OR
zoneminderzoneminderMatch1.21.4
OR
zoneminderzoneminderMatch1.22.0
OR
zoneminderzoneminderMatch1.22.1
OR
zoneminderzoneminderMatch1.22.2
OR
zoneminderzoneminderMatch1.22.3
OR
zoneminderzoneminderMatch1.23.0
OR
zoneminderzoneminderMatch1.23.1
OR
zoneminderzoneminderMatch1.23.2
VendorProductVersionCPE
zoneminderzoneminder*cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*
zoneminderzoneminder0.0.1cpe:2.3:a:zoneminder:zoneminder:0.0.1:*:*:*:*:*:*:*
zoneminderzoneminder0.9.7cpe:2.3:a:zoneminder:zoneminder:0.9.7:*:*:*:*:*:*:*
zoneminderzoneminder0.9.8cpe:2.3:a:zoneminder:zoneminder:0.9.8:*:*:*:*:*:*:*
zoneminderzoneminder0.9.9cpe:2.3:a:zoneminder:zoneminder:0.9.9:*:*:*:*:*:*:*
zoneminderzoneminder0.9.10cpe:2.3:a:zoneminder:zoneminder:0.9.10:*:*:*:*:*:*:*
zoneminderzoneminder0.9.11cpe:2.3:a:zoneminder:zoneminder:0.9.11:*:*:*:*:*:*:*
zoneminderzoneminder0.9.12cpe:2.3:a:zoneminder:zoneminder:0.9.12:*:*:*:*:*:*:*
zoneminderzoneminder0.9.13cpe:2.3:a:zoneminder:zoneminder:0.9.13:*:*:*:*:*:*:*
zoneminderzoneminder0.9.14cpe:2.3:a:zoneminder:zoneminder:0.9.14:*:*:*:*:*:*:*
Rows per page:
1-10 of 371

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

60.3%