Lucene search
Veracode Vulnerability DatabaseVERACODE:32288HistorySep 30, 2021 - 5:52 a.m.
Cross-site Scripting (XSS)
2021-09-3005:52:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
zoneminder
cross-site scripting
webroot url
filtration
vulnerability
EPSS
0.001
Percentile
37.8%
zoneminder:edge is vulnerable to cross site scripting (XSS). As the form action on multiple views utilizes $SERVER[‘PHPSELF’] insecurely, it mishandles any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS.
Related
cvelist
cvelist
CVE-2019-7329
2019-02-04 19:00:00
nvd
nvd
CVE-2019-7329
2019-02-04 19:29:00
osv
osv
CVE-2019-7329
2019-02-04 19:29:00
zoneminder vulnerabilities
2023-02-27 11:46:16
prion
prion
Cross site scripting
2019-02-04 19:29:00
cnvd
cnvd
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57837)
2022-04-01 00:00:00
debiancve
debiancve
CVE-2019-7329
2019-02-04 19:29:00
ubuntucve
ubuntucve
CVE-2019-7329
2019-02-04 00:00:00
alpinelinux
alpinelinux
CVE-2019-7329
2019-02-04 19:29:00
cve
cve
CVE-2019-7329
2019-02-04 19:29:00
ubuntu
ubuntu
ZoneMinder vulnerabilities
2023-02-27 00:00:00
nessus
nessus
openvas
openvas
Ubuntu: Security Advisory (USN-5889-1)
2023-02-28 00:00:00
ZoneMinder < 1.34.0 Multiple Vulnerabilities
2019-02-05 00:00:00