PT-2023-20437 · Unknown +2 · Zoneminder +2

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.36.33 and 1.37.33 Description: The issue is a SQL Injection vulnerability present within the filterQueryterms0attr query string parameter of the "/zm/index.php" endpoint. A user with the View or Edit permissions...