ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroupMonitorIds value...
9.8CVSS9.9AI score0.016EPSS
SaveExploits1References1
OSV•added 2019/02/18 12:29 a.m.•100 views
DEBIAN-CVE-2019-8423
ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...
