1583 matches found
Cross-site Scripting (XSS)
zoneminder:edge is vulnerable to cross site scripting XSS. An attacker is able to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...
Cross-site Scripting (XSS)
zoneminder is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation of $REQUEST'PHPSELF'...
Cross-site Scripting (XSS)
zoneminder:edge is vulnerable to cross site scripting XSS. As the form action on multiple views utilizes $SERVER'PHPSELF' insecurely, it mishandles any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS...
Cross-site Scripting (XSS)
zoneminder is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation via a vulnerable 'scale' parameter value in the view frame frame.php via /js/frame.js.php...
Cross-site Scripting (XSS)
zoneminder is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation via a vulnerable 'Host' parameter value in the view console console.php...
Cross-site Scripting (XSS)
ZoneMinder is vulnerable to cross-site scripting. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2020-52938)
ZoneMinder is a free and open source CCTV software application for Linux environments that supports IP, USB and analog cameras. A cross-site scripting vulnerability exists in ZoneMinder version 1.34.21. The vulnerability can be exploited to conduct cross-site scripting attacks via the connkey...
ZoneMinder < 1.34.21 Multiple XSS Vulnerabilities
ZoneMinder is prone to multiple cross-site scripting XSS vulnerabilities via the connkey parameter to download.php or export.php. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2020-25729
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...
DEBIAN-CVE-2020-25729
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...
CVE-2020-25729
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...
Design/Logic Flaw
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...
CVE-2020-25729
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...
CVE-2020-25729
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...
CVE-2020-25729
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...
CVE-2020-25729
ZoneMinder prior to 1.34.21 is affected by a cross-site scripting (XSS) vulnerability via the connkey parameter in download.php or export.php. The issue is documented across multiple sources (NVD, RH, CNVD, OSV, etc.) with the same description, indicating the vulnerability stems from unsanitized ...
CVE-2020-25729
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...
CVE-2020-25729
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...
PT-2020-16174
Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.34.21 Description The issue allows for XSS via the connkey parameter to "download.php" or "export.php" API endpoints. Recommendations For versions prior to 1.34.21, update to version 1.34.21 or later to resolve t...
