Cross-site Scripting (XSS)

zoneminder:edge is vulnerable to cross site scripting XSS. An attacker is able to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on the web page without applying any proper filtration. This relates to the view=logs value...

Cross-site Scripting (XSS)

zoneminder is vulnerable to Cross Site Scripting. The vulnerability exists due to a lack of validation of the 'level' parameter value in the view log log.php...

Cross-site Scripting (XSS)

zoneminder:edge is vulnerable to cross site scripting XSS. An attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view download download.php because proper filtration is omitted...

Cross-site Scripting (XSS)

zoneminder is vulnerable to Cross Site Scripting. The vulnerability exists due to a lack of validation of the function sortHeader in functions.php which insecurely returns the value of the limit query string parameter without applying any filtration...

Cross-site Scripting (XSS)

zoneminder is vulnerable to Cross Site Scripting. The vulnerability exists due to a lack of validation of the field named "signal check color" monitor.php...

Cross-site Scripting (XSS)

zoneminder:edge is vulnerable to cross site scripting XSS. An attacker is able to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...

Cross-site Scripting (XSS)

zoneminder is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation of $REQUEST'PHPSELF'...

Cross-site Scripting (XSS)

zoneminder:edge is vulnerable to cross site scripting XSS. As the form action on multiple views utilizes $SERVER'PHPSELF' insecurely, it mishandles any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS...

Cross-site Scripting (XSS)

zoneminder is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation via a vulnerable 'scale' parameter value in the view frame frame.php via /js/frame.js.php...

Cross-site Scripting (XSS)

zoneminder is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation via a vulnerable 'Host' parameter value in the view console console.php...

Cross-site Scripting (XSS)

ZoneMinder is vulnerable to cross-site scripting. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...

ZoneMinder < 1.34.21 Multiple XSS Vulnerabilities

ZoneMinder is prone to multiple cross-site scripting XSS vulnerabilities via the connkey parameter to download.php or export.php. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2020-52938)

ZoneMinder is a free and open source CCTV software application for Linux environments that supports IP, USB and analog cameras. A cross-site scripting vulnerability exists in ZoneMinder version 1.34.21. The vulnerability can be exploited to conduct cross-site scripting attacks via the connkey...

DEBIAN-CVE-2020-25729

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...

CVE-2020-25729

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...

CVE-2020-25729

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...

Design/Logic Flaw

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...

CVE-2020-25729

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...

CVE-2020-25729

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...

CVE-2020-25729

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php...