Описание
Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zoneminder | fixed | 1.30.4+dfsg-1 | package | |
| zoneminder | no-dsa | jessie | package | |
| zoneminder | no-dsa | wheezy | package |
EPSS
Процентиль: 62%
0.01062
Низкий
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 9 лет назад
Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor.
CVSS3: 6.1
nvd
больше 9 лет назад
Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor.
CVSS3: 6.1
github
больше 4 лет назад
Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor.
EPSS
Процентиль: 62%
0.01062
Низкий