Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-6990

Опубликовано: 28 янв. 2019
Источник: debian

Описание

A stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a crafted Zone NAME to the index.php?view=zones&action=zoneImage&mid=1 URI.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
zoneminderfixed1.32.3-2package

Примечания

  • https://github.com/ZoneMinder/zoneminder/commit/a3e8fd4fd5b579865f35aac3b964bc78d5b7a94a

  • https://github.com/ZoneMinder/zoneminder/issues/2444

Связанные уязвимости

ubuntu логотип

CVE-2019-6990

CVSS3: 5.4
ubuntu
около 7 лет назад

A stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a crafted Zone NAME to the index.php?view=zones&action=zoneImage&mid=1 URI.

nvd логотип

CVE-2019-6990

CVSS3: 5.4
nvd
около 7 лет назад

A stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a crafted Zone NAME to the index.php?view=zones&action=zoneImage&mid=1 URI.

github логотип

GHSA-ph66-m9wc-38mf

CVSS3: 5.4
github
больше 3 лет назад

A stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a crafted Zone NAME to the index.php?view=zones&action=zoneImage&mid=1 URI.