Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-7331

Опубликовано: 04 фев. 2019
Источник: nvd
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*
Версия до 1.32.3 (включая)

EPSS

Процентиль: 30%
0.00112
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2019-7331

CVSS3: 6.1
ubuntu
больше 6 лет назад

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack.

debian логотип

CVE-2019-7331

CVSS3: 6.1
debian
больше 6 лет назад

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through ...

github логотип

GHSA-24p7-v3fm-63vm

CVSS3: 6.1
github
около 3 лет назад

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack.

EPSS

Процентиль: 30%
0.00112
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79