Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-7352

Опубликовано: 04 фев. 2019
Источник: nvd
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka newState) field, allowing an attacker to execute HTML or JavaScript code.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*
Версия до 1.32.3 (включая)

EPSS

Процентиль: 55%
0.00328
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2019-7352

CVSS3: 6.1
ubuntu
около 7 лет назад

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka newState) field, allowing an attacker to execute HTML or JavaScript code.

debian логотип

CVE-2019-7352

CVSS3: 6.1
debian
около 7 лет назад

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through ...

github логотип

GHSA-q923-r9w2-vjcv

CVSS3: 6.1
github
больше 3 лет назад

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka newState) field, allowing an attacker to execute HTML or JavaScript code.

EPSS

Процентиль: 55%
0.00328
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79