1272 matches found
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57841)
ZoneMinder is an open source video surveillance software system. ZoneMinder 1.32.3 and earlier versions have a cross-site scripting vulnerability that stems from the fact that the program is not properly filtered and can be exploited by remote attackers to execute arbitrary HTML or JavaScript cod...
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57831)
ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and earlier versions, which stems from the fact that the program is not properly filtered and can be exploited by...
PT-2022-6497 Ā· UnknownĀ +4 Ā· ZoneminderĀ +4
Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.36.13 Description: The issue is related to incorrect restriction of a directory path with limited access in ZoneMinder, a video surveillance software. This can be exploited by a remote attacker to execute...
Mageia: Security Advisory (MGASA-2017-0162)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cross-site Scripting (XSS)
zoneminder:edge is vulnerable to denial of service. Stored XSS in the Filters page Name field in ZoneMinder allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...
Cross-site Scripting (XSS)
ZoneMinder is vulnerable to cross-site scripting. The vulnerability exists due to an insecure connkey parameter to download.php or export.php...
SQL Injection
ZoneMinder has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...
Cross-site Scripting (XSS)
zoneminder is vulnerable to cross-site scripting. An attacker is able to execute HTML or javascript via web/skins/classic/views/controlcaps.php via a long NAME or PROTOCOL to the index.php?view=controlcaps URI...
Cross-site Scripting (XSS)
zoneminder is vulnerable to cross-site scripting. An attacker is able to execute HTML or javascript via web/skins/classic/views/zones.php via a crafted Zone NAME to the index.php?view=zones=zoneImageā£=1 URI...
Denial Of Service (DoS)
zoneminder:edge is vulnerable to denial of service. A classic Stack-based buffer overflow exists in the zmLoadUser function in zmuser.cpp of the zmu binary in ZoneMinder, allowing an unauthenticated attacker to execute code via a long username...
Cross-site Scripting (XSS)
zoneminder is vulnerable to cross-site scripting. The vulnerability exists due to a lack of input validation to the value supplied to the 'New State' aka newState field, allowing an attacker to execute HTML or JavaScript code...
Log Injection
ZoneMinder is vulnerable to log Injectio. An attacker can entice the victim to visit a specially crafted link, which in turn will inject a custom Log message provided by the attacker in the 'log' view page, as demonstrated by the message=User%20'admin'%20Logged%20in value...
Privilege Escalation
zoneminder is vulnerable to privilege escalation. The vulnerability exists due to a Time-of-check Time-of-use TOCTOU Race Condition...
Cross-Site Request Forgery (CSRF)
ZoneMinder is vulnerable to cross-site request forgery. Whenever a CSRF check fails, a callback function is called displaying a "Try again" button, which allows resending the failed request, making the CSRF attack successful...
Cross-site Scripting (XSS)
zoneminder is vulnerable to Cross Site Scripting. The vulnerability exists due to a lack of validation in the view 'options' options.php for the WEBTITLE, HOMEURL, HOMECONTENT, or WEBCONSOLEBANNER value...
Cross-site Scripting (XSS)
zoneminder:edge is vulnerable to cross-site scripting. An attacker is able to execute HTML or JavaScript code in the view 'filter' as it insecurely prints the 'filterName' aka Filter name value on the web page without applying any proper filtration...
Cross-site Scripting (XSS)
zoneminder is vulnerable to Cross Site Scripting. The vulnerability exists due to a lack of validation in the 'newMonitorV4LCapturesPerFrame' parameter value in the view monitor monitor.php...
Cross Site Scripting (XSS)
zoneminder:edge is vulnerable to Cross Site Scripting XSS. It exists in ZoneMinder, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user user.php because proper filtration is omitted...
Cross-site Scripting (XSS)
zoneminder is vulnerable to Cross Site Scripting. The vulnerability exists due to a lack of validation in the 'newMonitorMethod' parameter value in the view monitor monitor.php...
Cross-site Scripting (XSS)
zoneminder:edge is vulnerable to cross site scripting XSS. An attacker is able to execute HTML or JavaScript code via a vulnerable 'filterAutoExecuteCmd' parameter value in the view filter filter.php because proper filtration is omitted...