CVE-2008-1381

Опубликовано: 27 апр. 2008

Источник: redhat

CVSS2: 6.5

Описание

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=444434zoneminder: command injection via unescaped php exec() calls

6.5 Medium

CVSS2

Связанные уязвимости

CVE-2008-1381

ubuntu

больше 17 лет назад

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

CVE-2008-1381

nvd

больше 17 лет назад

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

CVE-2008-1381

debian

больше 17 лет назад

ZoneMinder before 1.23.3 allows remote authenticated users, and possib ...

GHSA-5qh7-p4hh-vm8p

github

больше 3 лет назад

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

6.5 Medium

CVSS2