CVE-2008-3880

Опубликовано: 02 сент. 2008

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*

Версия до 1.23.3 (включая)

cpe:2.3:a:zoneminder:zoneminder:0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:0.9.7:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:0.9.8:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:0.9.9:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:0.9.10:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:0.9.11:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:0.9.12:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:0.9.13:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:0.9.14:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:0.9.15:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:0.9.16:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.17.0:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.17.1:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.17.2:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.18.0:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.18.1:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.19.0:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.19.1:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.19.2:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.19.3:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.19.4:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.19.5:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.20.0:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.20.1:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.21.0:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.21.1:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.21.2:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.21.3:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.21.4:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.22.0:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.22.1:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.22.2:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.22.3:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.23.0:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.23.1:*:*:*:*:*:*:*

cpe:2.3:a:zoneminder:zoneminder:1.23.2:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00422

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVE-2008-3880

ubuntu

около 17 лет назад

SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter.

CVE-2008-3880

redhat

около 17 лет назад

SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter.

CVE-2008-3880

debian

около 17 лет назад

SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1. ...

GHSA-fg4c-q4wp-fvrw

github

больше 3 лет назад

SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter.

EPSS

Процентиль: 61%

0.00422

Низкий

7.5 High

CVSS2

Дефекты

CWE-89