PT-2019-18530 · Zoneminder +3 · Zoneminder +3

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.4 Description: A Reflected Cross Site Scripting XSS issue exists due to insecure utilization of the $ REQUEST'PHP SELF' variable in multiple views under web/skins/classic/views, without proper filtration...

PT-2019-18544

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Cross Site Scripting XSS issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable level parameter value in the "view log" page, which is accessed through the...

CVE-2019-7326: Improper Neutralization of Input During Web Page Generation

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in the view console console.php because proper filtration is omitted. This relates to the index.php?view=monitor Host Name...

CVE-2019-7330: Improper Neutralization of Input During Web Page Generation

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...

PT-2019-18546

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Reflected Cross Site Scripting XSS issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable newMonitorLinkedMonitors parameter value in the "view monitor" page,...

PT-2019-18551

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A CSRF check issue exists, allowing a CSRF attack to be successful. Whenever a CSRF check fails, a callback function is called, displaying a "Try again" button. This button allows resending the...

PT-2019-18550

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.33 Description A Self-Stored Cross Site Scripting XSS issue exists due to the lack of input validation for the WEB TITLE, HOME URL, HOME CONTENT, or WEB CONSOLE BANNER values in the 'options' view options.php,...

PT-2019-18547

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Cross Site Scripting XSS issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable filterAutoExecuteCmd parameter value in the view filter filter.php because proper...

PT-2019-18539

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Reflected Cross Site Scripting issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable Exportfile parameter value in the "view export" functionality, specifically...

PT-2019-18549

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A reflected XSS issue exists, allowing an attacker to execute HTML or JavaScript code in the 'filter' view. This occurs because the filterName value is insecurely printed on the web page without...

PT-2019-18548

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Reflected Cross Site Scripting XSS issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable newMonitorMethod parameter value in the "view monitor" page, specifical...

PT-2019-18538

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Reflected Cross Site Scripting issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable Exportfile parameter value in the "view download" download.php due to omitt...

PT-2019-18557

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Self-Stored Cross Site Scripting XSS issue exists due to the lack of input validation in the 'New State' field, allowing an attacker to execute HTML or JavaScript code. Recommendations For...

PT-2019-18543

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Self-Stored XSS issue exists, allowing an attacker to execute HTML or JavaScript code in the 'group' view. This occurs because the 'Group Name' value is printed on the web page without proper...

PT-2019-18540

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Self-Stored XSS issue exists, allowing an attacker to execute HTML or JavaScript code in the 'log' view. This occurs because the 'Log Message' value is insecurely printed on the web page withou...

ZoneMinder Buffer Overflow Vulnerability

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. A stack buffer overflow vulnerability exists in the 'zmLoadUser' function of the zmu binary's zmuser.cpp file in ZoneMinder 1.32.3 and earlier versions, which can be exploited...

ZoneMinder cross-site scripting vulnerability (CNVD-2019-04691)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. ZoneMinder1.32.3 and previous versions of the web/skins/classic/views/zones.php file there is a cross-site scripting vulnerability , an attacker can send a specially crafted...

ZoneMinder <= 1.32.3 Multiple Vulnerabilities

ZoneMinder is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoneminder:zoneminder"; if...

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2019-04689)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. A cross-site scripting vulnerability exists in the web/skins/classic/views/controlcaps.php file in ZoneMinder 1.32.3 and earlier versions, which stems from the program's failu...

DEBIAN-CVE-2019-6992

A stored-self XSS exists in web/skins/classic/views/controlcaps.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a long NAME or PROTOCOL to the index.php?view=controlcaps URI...