CVE-2019-8425: Improper Neutralization of Input During Web Page Generation

includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages...

PT-2019-19027

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.3 Description The issue concerns the construction of SQL error messages in the includes/database.php file, which is affected by a cross-site scripting XSS issue. Recommendations For versions prior to 1.32.3,...