1272 matches found
CVE-2019-6991
A classic Stack-based buffer overflow exists in the zmLoadUser function in zmuser.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a long username...
PT-2019-6328 · Zoneminder +3 · Zoneminder +3
Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.3 Description: The issue is related to a stack-based buffer overflow in the zmLoadUser function, which can be exploited by a remote attacker to execute arbitrary code or cause a denial of service. This is a...
ZoneMinder 1.32.3 XSS Vulnerability
ZoneMinder is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2019-18403 · Zoneminder +3 · Zoneminder +3
Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.3 Description: A stored-self XSS issue exists, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a long NAME or PROTOCOL to the "index.php?view=controlcaps" URI. Recommendation...
ZoneMinder cross-site scripting vulnerability (CNVD-2019-04696)
ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. A cross-site scripting vulnerability exists in the web/skins/classic/views/plugin.php file in ZoneMinder version 1.32.3, which can be exploited by a remote attacker with the...
PT-2019-18402 · Zoneminder +3 · Zoneminder +3
Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.3 Description: A stored-self XSS issue exists, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a crafted Zone NAME to the "index.php?view=zones&action=zoneImage&mid=1" URI...
CVE-2019-6777
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
CVE-2019-6777
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
Cross site scripting
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
CVE-2019-6777
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
CVE-2019-6777
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
CVE-2019-6777
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
CVE-2019-6777
CVE-2019-6777 affects ZoneMinder v1.32.3 with a reflected XSS in web/skins/classic/views/plugin.php reachable via zm/index.php?view=plugin pl parameter. Root cause: insufficient input sanitization for the pl parameter, allowing injection into reflected output. Impact per sources: partial confiden...
CVE-2019-6777
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
PT-2019-18337 · Zoneminder +3 · Zoneminder +3
Name of the Vulnerable Software and Affected Versions: ZoneMinder version 1.32.3 Description: An issue exists in the software where Reflected XSS is present in the web/skins/classic/views/plugin.php file via the pl parameter in the /zm/index.php?view=plugin API endpoint. Recommendations: For...
SQL injection vulnerability in Zoneminder ev***.php file
Zoneminder is an open source video surveillance system. A SQL injection vulnerability exists in the Zoneminder ev.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in Zoneminder st***.php File
Zoneminder is an open source video surveillance system. A SQL injection vulnerability exists in the Zoneminder st.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in Zoneminder rs***.php File
Zoneminder is an open source video surveillance system. A SQL injection vulnerability exists in the Zoneminder rs.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
ZoneMinder < 1.32.3 Object Injection Vulnerability
ZoneMinder is prone to an object injection vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoneminder:zoneminder";...