CVE-2008-1381

Опубликовано: 27 апр. 2008

Источник: redhat

CVSS2: 6.5

EPSS Низкий

Описание

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=444434zoneminder: command injection via unescaped php exec() calls

EPSS

Процентиль: 81%

0.01505

Низкий

6.5 Medium

CVSS2

Связанные уязвимости

CVE-2008-1381

ubuntu

почти 18 лет назад

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

CVE-2008-1381

nvd

почти 18 лет назад

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

CVE-2008-1381

debian

почти 18 лет назад

ZoneMinder before 1.23.3 allows remote authenticated users, and possib ...

GHSA-5qh7-p4hh-vm8p

github

почти 4 года назад

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

EPSS

Процентиль: 81%

0.01505

Низкий

6.5 Medium

CVSS2