CVE-2023-41884 ZoneMinder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in watch.php

ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34...

CVE-2023-41884

CVE-2023-41884 affects ZoneMinder: watch.php processes multiple SQL query parameters without proper sanitization, creating a SQL Injection risk in the ZoneMinder 1.x series. The vulnerability is described in the public CVE entry and corroborated by multiple sources noting the issue originates fro...

CVE-2023-41884 ZoneMinder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in watch.php

ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34...

CVE-2023-41884

ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34...

PT-2024-13007 · Unknown +2 · Zoneminder +2

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.36.34 Description: The issue is related to a SQL injection vulnerability in the ZoneMinder application. Specifically, the watch.php file takes a few parameters in an SQL query without proper sanitization, making...

ZoneMinder 安全漏洞

ZoneMinder is an open source video surveillance software system from ZoneMinder Open Source. The system supports IP, USB and analog cameras, among others. A security vulnerability exists in ZoneMinder, which originates from a cross-site scripting vulnerability in the displayinterval, speed and...

ZoneMinder 安全漏洞

ZoneMinder is an open source video surveillance software system from ZoneMinder Open Source. The system supports IP, USB and analog cameras, among others. A security vulnerability exists in ZoneMinder versions prior to 1.36.34, which stems from not cleaning up query parameters and is vulnerable t...

CVE-2023-41884: Improper Neutralization of Special Elements used in an SQL Command

ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34...

PT-2024-30526 · Unknown +2 · Zoneminder +2

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.36.34 ZoneMinder versions prior to 1.37.61 Description: ZoneMinder has a cross-site scripting vulnerability in the filter view via the filterId. This issue allows for potential malicious script execution...

CVE-2024-43359: Improper Neutralization of Input During Web Page Generation

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

ZoneMinder 安全漏洞

ZoneMinder is an open source video surveillance software system from ZoneMinder Open Source. The system supports IP, USB, and analog cameras, among others. A security vulnerability exists in ZoneMinder that stems from the inclusion of a time-based SQL injection vulnerability...

ZoneMinder 安全漏洞

ZoneMinder is an open source video surveillance software system from ZoneMinder Open Source. The system supports IP, USB, and analog cameras, among others. ZoneMinder has a security vulnerability that originates from a cross-site scripting vulnerability in filterId in the filter view...

CVE-2024-43358: Improper Neutralization of Input During Web Page Generation

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the filter view via the filterId. This vulnerability is fixed in 1.36.34 and 1.37.61...

CVE-2024-43360: Improper Neutralization of Special Elements used in an SQL Command

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vulnerability is fixed in 1.36.34 and 1.37.61...

PT-2024-9833 · Unknown +2 · Zoneminder +2

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions 1.36.33 through 1.37.43 ZoneMinder versions prior to 1.36.34 ZoneMinder versions prior to 1.37.61 Description: ZoneMinder is affected by a time-based SQL Injection vulnerability. The issue stems from improper sanitization ...

CVE-2020-25730

Cross Site Scripting XSS vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHPSELF component in classic/views/download.php...

DEBIAN-CVE-2020-25730

Cross Site Scripting XSS vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHPSELF component in classic/views/download.php...

UBUNTU-CVE-2020-25730

Cross Site Scripting XSS vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHPSELF component in classic/views/download.php...

CVE-2020-25730: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHPSELF component in classic/views/download.php...

CVE-2020-25730

Cross Site Scripting XSS vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHPSELF component in classic/views/download.php...