Описание
ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34.
Уязвимые конфигурации
Конфигурация 1Версия до 1.36.34 (исключая)
cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*
EPSS
Процентиль: 44%
0.00508
Низкий
7.1 High
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-89
CWE-89
Связанные уязвимости
CVSS3: 6.5
ubuntu
около 2 лет назад
ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34.
CVSS3: 6.5
debian
около 2 лет назад
ZoneMinder is a free, open source Closed-circuit television software a ...
CVSS3: 9.8
altlinux
около 2 лет назад
ALT-PU-2024-12153: package `zoneminder` update to version 1.36.34-alt1
EPSS
Процентиль: 44%
0.00508
Низкий
7.1 High
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-89
CWE-89