CVE-2019-7343

2019-02-04T19:29:00
ID CVE-2019-7343
Type cve
Reporter cve@mitre.org
Modified 2019-02-05T21:26:00

Description

Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[Method]' parameter value in the view monitor (monitor.php) because proper filtration is omitted.