Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable ‘newMonitor[Method]’ parameter value in the view monitor (monitor.php) because proper filtration is omitted.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | zoneminder | < 1.34.6-1 | zoneminder_1.34.6-1_all.deb |
Debian | 11 | all | zoneminder | < 1.34.6-1 | zoneminder_1.34.6-1_all.deb |
Debian | 999 | all | zoneminder | < 1.34.6-1 | zoneminder_1.34.6-1_all.deb |