Remote code execution

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

Remote code execution

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

CVE-2018-1000833

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

CVE-2018-1000832

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

UBUNTU-CVE-2018-1000833

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

CVE-2018-1000832

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

CVE-2018-1000832

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

CVE-2018-1000833

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

CVE-2018-1000833

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

CVE-2018-1000832

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

CVE-2018-1000833

ZoneMinder is affected by an object-injection vulnerability tracked as CVE-2018-1000833, affecting ZoneMinder versions <= 1.32.2 (also reported by OpenVAS as ZoneMinder

CVE-2018-1000832

CVE-2018-1000832 affects ZoneMinder versions

CVE-2018-1000832: Deserialization of Untrusted Data

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

CVE-2018-1000833: Deserialization of Untrusted Data

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

PT-2019-19031

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.3 Description The issue allows for SQL Injection via the ajax/status.php endpoint, specifically through the filterQueryterms0cnj parameter. Recommendations For versions prior to 1.32.3, update to version 1.32....

PT-2019-19030

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.3 Description The issue allows for SQL Injection via the groupSql parameter in the skins/classic/views/control.php file, as demonstrated by a newGroupMonitorIds value. This can be exploited through the API...

PT-2018-9557

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.3 Description The issue concerns a vulnerability in a user-controlled parameter, potentially leading to disclosure of confidential data, denial of service, SSRF, and remote code execution. Recommendations For...

PT-2018-9556

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.3 Description The issue concerns a vulnerability in a user-controlled parameter, potentially leading to disclosure of confidential data, denial of service, SSRF, and remote code execution. Recommendations For...

PT-2019-19028

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.3 Description The issue concerns an XSS vulnerability. It can be exploited via the newControl array, specifically through the newControlMinTiltRange parameter in the skins/classic/views/controlcap.php file...

PT-2019-19027

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.3 Description The issue concerns the construction of SQL error messages in the includes/database.php file, which is affected by a cross-site scripting XSS issue. Recommendations For versions prior to 1.32.3,...