Lucene search
PRIOn knowledge basePRION:CVE-2019-7337HistoryFeb 04, 2019 - 7:29 p.m.
Cross site scripting
2019-02-0419:29:00
PRIOn knowledge base
www.prio-n.com
9
0.001 Low
EPSS
Percentile
24.9%
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view ‘events’ (events.php) insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader() in functions.php, which insecurely returns the value of the limit query string parameter without applying any filtration.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zoneminder | le | 1.32.3 |
Related
cve
cve
CVE-2019-7337
2022-10-03 16:19:29
cnvd
cnvd
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57822)
2022-04-01 00:00:00
debiancve
debiancve
CVE-2019-7337
2022-10-03 16:19:29
nvd
nvd
CVE-2019-7337
2019-02-04 19:29:00
osv
osv
CVE-2019-7337
2019-02-04 19:29:00
cvelist
cvelist
CVE-2019-7337
2022-10-03 16:19:29
ubuntucve
ubuntucve
CVE-2019-7337
2019-02-04 00:00:00
alpinelinux
alpinelinux
CVE-2019-7337
2022-10-03 16:19:29
veracode
veracode
Cross-site Scripting (XSS)
2021-09-30 05:56:36
openvas
openvas
ZoneMinder < 1.34.0 Multiple Vulnerabilities
2019-02-05 00:00:00