CVE-2019-8428: Improper Neutralization of Special Elements used in an SQL Command

ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroupMonitorIds value...

PT-2019-19030

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.3 Description The issue allows for SQL Injection via the groupSql parameter in the skins/classic/views/control.php file, as demonstrated by a newGroupMonitorIds value. This can be exploited through the API...