Lucene search
GoogleOSV:CVE-2019-7337HistoryFeb 04, 2019 - 7:29 p.m.
CVE-2019-7337
2019-02-0419:29:00
Google
osv.dev
4
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view ‘events’ (events.php) insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader() in functions.php, which insecurely returns the value of the limit query string parameter without applying any filtration.
Related
cve
cve
CVE-2019-7337
2022-10-03 16:19:29
cnvd
cnvd
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57822)
2022-04-01 00:00:00
debiancve
debiancve
CVE-2019-7337
2022-10-03 16:19:29
nvd
nvd
CVE-2019-7337
2019-02-04 19:29:00
ubuntucve
ubuntucve
CVE-2019-7337
2019-02-04 00:00:00
alpinelinux
alpinelinux
CVE-2019-7337
2022-10-03 16:19:29
veracode
veracode
Cross-site Scripting (XSS)
2021-09-30 05:56:36
prion
prion
Cross site scripting
2019-02-04 19:29:00
cvelist
cvelist
CVE-2019-7337
2022-10-03 16:19:29
openvas
openvas
ZoneMinder < 1.34.0 Multiple Vulnerabilities
2019-02-05 00:00:00