CVE-2008-3882

ZoneMinder (version 1.23.3 and earlier) contains an unspecified Command Injection vulnerability. The issue is triggered via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php, allowing remote attackers to execute arbitrary commands....

CVE-2008-3882

Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via 1 the executeFilter function in zmhtmlviewevents.php and 2 the runstate parameter to zmhtmlviewstate.php...

CVE-2008-3881

Multiple cross-site scripting XSS vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zmhtmlview.php" files...

CVE-2008-3881

CVE-2008-3881 describes multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified "zm_html_view_.php" files. The core technical details available in the provided documents iden...

CVE-2008-3880

CVE-2008-3880 affects ZoneMinder 1.23.3 and earlier. The vulnerability is an SQL injection in zm_html_view_event.php via the filter array parameter, allowing remote attackers to execute arbitrary SQL commands. Connected sources corroborate the vulnerable file and parameter, and the impact is cons...

CVE-2008-3881

Multiple cross-site scripting XSS vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zmhtmlview.php" files...

CVE-2008-3882

Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via 1 the executeFilter function in zmhtmlviewevents.php and 2 the runstate parameter to zmhtmlviewstate.php...

CVE-2008-3880

SQL injection vulnerability in zmhtmlviewevent.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter...

ZoneMinder Multiple Vulnerabilities

ZoneMinder Multiple Vulnerabilities by Filip Palian filip dot palian at pjwstk dot edu dot pl Software affected: ZoneMinder = 1.23.3 Severity: Critical Description from the vendor site: ZoneMinder is an integrated set of applications which provide a complete surveillance solution allowing capture...

Fedora 9 : zoneminder-1.22.3-14.fc9 (2008-3601)

Tue May 6 2008 Martin Ebourne - 1.22.3-14 - Remove default runlevel, bz 441315 - Wed Apr 30 2008 Martin Ebourne - 1.22.3-13 - Patch for CVE-2008-1381 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

[SECURITY] Fedora 9 Update: zoneminder-1.22.3-14.fc9

ZoneMinder is a set of applications which is intended to provide a complete solution allowing you to capture, analyse, record and monitor any cameras y ou have attached to a Linux based machine. It is designed to run on kernels wh ich support the Video For Linux V4L interface and has been tested...

Fedora 7 : zoneminder-1.22.3-8.fc7 (2008-3516)

Bug 444434 - CVE-2008-1381 zoneminder: command injection via unescaped php exec calls Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 8 : zoneminder-1.22.3-10.fc8 (2008-3462)

Tue Apr 29 2008 Martin Ebourne - 1.22.3-10 - Patch for CVE-2008-1381 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 8 Update: zoneminder-1.22.3-10.fc8

ZoneMinder is a set of applications which is intended to provide a complete solution allowing you to capture, analyse, record and monitor any cameras y ou have attached to a Linux based machine. It is designed to run on kernels wh ich support the Video For Linux V4L interface and has been tested...

[SECURITY] Fedora 7 Update: zoneminder-1.22.3-8.fc7

ZoneMinder is a set of applications which is intended to provide a complete solution allowing you to capture, analyse, record and monitor any cameras y ou have attached to a Linux based machine. It is designed to run on kernels wh ich support the Video For Linux V4L interface and has been tested...

DTSA-130-1 zoneminder - arbitrary code execution

Bulletin has no description...

DEBIAN-CVE-2008-1381

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL...

CVE-2008-1381

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL...

CVE-2008-1381

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL...

CVE-2008-1381

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL...