ZoneMinder command injection vulnerability

Versions of ZoneMinder prior to 1.36.40, as well as versions 1.38.0 to 1.38.2 and 1.39.0 to 1.39.2, have a command injection vulnerability. This vulnerability stems from the insertion of an unvalidated monitor Device field into shell commands in PHP and Perl. When authenticated users with the...