4 matches found
CVE-2020-25730
Cross Site Scripting XSS vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHPSELF component in classic/views/download.php...
CVE-2020-25730
Cross Site Scripting XSS vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHPSELF component in classic/views/download.php...
CVE-2020-25730
ZoneMinder versions prior to 1.34.21 are vulnerable to a Cross Site Scripting (XSS) vulnerability. The flaw exists in the PHP_SELF component within the classic/views/download.php file. A remote attacker can exploit this to execute arbitrary code , escalate privileges , and obtain sensitive inform...
CVE-2020-25730
Cross Site Scripting XSS vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHPSELF component in classic/views/download.php...