PT-2020-16174

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.34.21 Description The issue allows for XSS via the connkey parameter to "download.php" or "export.php" API endpoints. Recommendations For versions prior to 1.34.21, update to version 1.34.21 or later to resolve t...

CVE-2020-25729: Improper Neutralization of Input During Web Page Generation

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...

ZoneMinder 1.32.3 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: ZoneMinder 1.32.3 - Stored Cross Site Scripting filters Google Dork: None Exploit Author: Joey Lane Vendor Homepage: https://zoneminder.com Software Link: https://github.com/ZoneMinder/zoneminder/releases Version: 1.32.3 Tested...

ZoneMinder 1.32.3 - Cross-Site Scripting

Exploit Title: ZoneMinder 1.32.3 - Stored Cross Site Scripting filters Google Dork: None Date: 6/29/2019 Exploit Author: Joey Lane Vendor Homepage: https://zoneminder.com Software Link: https://github.com/ZoneMinder/zoneminder/releases Version: 1.32.3 Tested on: Ubuntu 16.04 CVE : Pending...

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-71409)

ZoneMinder is a free open source CCTV software application for the Linux environment that supports IP, USB, and analog cameras.A stored cross-site scripting vulnerability exists in the Filters page Name field in ZoneMinder 1.32.3. An attacker could exploit this vulnerability to embed and execute...

ZoneMinder 1.32.3 - Cross-Site Scripting

ZoneMinder 1.32.3 - Cross-Site Scripting Exploit Title: ZoneMinder 1.32.3 - Stored Cross Site Scripting filters Google Dork: None Date: 6/29/2019 Exploit Author: Joey Lane Vendor Homepage: https://zoneminder.com Software Link: https://github.com/ZoneMinder/zoneminder/releases Version: 1.32.3 Test...

CVE-2019-13072

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

CVE-2019-13072

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

UBUNTU-CVE-2019-13072

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

Cross site scripting

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

CVE-2019-13072

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

CVE-2019-13072

The CVE-2019-13072 entry describes a Stored XSS vulnerability in ZoneMinder 1.32.3, specifically in the Filters page (Name field). The underlying issue is a stored script that can be embedded and executed in the browser of any user visiting that page. Multiple connected sources (NVD/NASL/Nessus/N...

CVE-2019-13072

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

CVE-2019-13072

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

CVE-2019-13072

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

CVE-2019-13072

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

PT-2019-13110 · Zoneminder +1 · Zoneminder +1

Name of the Vulnerable Software and Affected Versions: ZoneMinder version 1.32.3 Description: The issue allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to the Filters page, specifically by exploiting the Name field. This is a result of a store...

CVE-2019-13072: Improper Neutralization of Input During Web Page Generation

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

ZoneMinder 1.32.3 Cross Site Scripting

Exploit Title: ZoneMinder 1.32.3 - Stored Cross Site Scripting filters Google Dork: None Date: 6/29/2019 Exploit Author: Joey Lane Vendor Homepage: https://zoneminder.com Software Link: https://github.com/ZoneMinder/zoneminder/releases Version: 1.32.3 Tested on: Ubuntu 16.04 CVE : Pending...

ZoneMinder SQL Injection Vulnerability (CNVD-2019-04693)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. SQL injection vulnerability exists in the skins/classic/views/control.php file in versions prior to ZoneMinder 1.32.3, which can be exploited by remote attackers to execute SQ...