1264 matches found
Cross site scripting
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
CVE-2019-6777
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
CVE-2019-6777
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
CVE-2019-6777
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
CVE-2019-6777
CVE-2019-6777 affects ZoneMinder v1.32.3 with a reflected XSS in web/skins/classic/views/plugin.php reachable via zm/index.php?view=plugin pl parameter. Root cause: insufficient input sanitization for the pl parameter, allowing injection into reflected output. Impact per sources: partial confiden...
CVE-2019-6777
An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
PT-2019-18337 · Zoneminder +3 · Zoneminder +3
Name of the Vulnerable Software and Affected Versions: ZoneMinder version 1.32.3 Description: An issue exists in the software where Reflected XSS is present in the web/skins/classic/views/plugin.php file via the pl parameter in the /zm/index.php?view=plugin API endpoint. Recommendations: For...
SQL Injection Vulnerability in Zoneminder st***.php File
Zoneminder is an open source video surveillance system. A SQL injection vulnerability exists in the Zoneminder st.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL injection vulnerability in Zoneminder ev***.php file
Zoneminder is an open source video surveillance system. A SQL injection vulnerability exists in the Zoneminder ev.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in Zoneminder rs***.php File
Zoneminder is an open source video surveillance system. A SQL injection vulnerability exists in the Zoneminder rs.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
ZoneMinder < 1.32.3 Object Injection Vulnerability
ZoneMinder is prone to an object injection vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoneminder:zoneminder";...
CVE-2018-1000832
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
CVE-2018-1000833
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
CVE-2018-1000833
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
DEBIAN-CVE-2018-1000832
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
CVE-2018-1000832
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
Remote code execution
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
CVE-2018-1000833
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
UBUNTU-CVE-2018-1000833
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
Remote code execution
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...