CVE-2019-8424

Опубликовано: 18 фев. 2019

Источник: debian

Описание

ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.

Пакет	Статус	Версия исправления	Релиз	Тип
zoneminder	fixed	1.34.6-1		package

See README.Debian.security, only supported behind an authenticated HTTP zone
https://github.com/ZoneMinder/zoneminder/commit/02fd1e79b3bfa5b2e2087cb1255f9dbd921ccae8
https://github.com/ZoneMinder/zoneminder/pull/2421

CVE-2019-8424

CVSS3: 9.8

ubuntu

почти 7 лет назад

ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.

CVE-2019-8424

CVSS3: 9.8

nvd

почти 7 лет назад

ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.

GHSA-xh73-mcmv-h45w

CVSS3: 9.8

github

больше 3 лет назад

ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.