CVE-2016-10204

2017-03-0300:00:00

ubuntu.com

0.002 Low

EPSS

Percentile

53.8%

JSON

SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote
attackers to execute arbitrary SQL commands via the limit parameter in a
log query request to index.php.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854272>

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchzoneminder< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	16.04	noarch	zoneminder	< any	UNKNOWN

References

seclists.org/bugtraq/2017/Feb/5

www.openwall.com/lists/oss-security/2017/02/05/1

launchpad.net/bugs/cve/CVE-2016-10204

nvd.nist.gov/vuln/detail/CVE-2016-10204

security-tracker.debian.org/tracker/CVE-2016-10204

www.cve.org/CVERecord?id=CVE-2016-10204

www.foxmole.com/advisories/foxmole-2016-07-05.txt

0.002 Low

EPSS

Percentile

53.8%

JSON

Related for UB:CVE-2016-10204