CVE-2008-3880

Опубликовано: 26 авг. 2008

Источник: redhat

EPSS Низкий

Описание

SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter.

Ссылки на источники

Дополнительная информация

Дефект:

CWE-89

https://bugzilla.redhat.com/show_bug.cgi?id=460280zoneminder: command injection, SQL injection and multiple XSS issues (CVE-2008-3882, CVE-2008-3880, CVE-2008-3881)

EPSS

Процентиль: 62%

0.0108

Низкий

Связанные уязвимости

CVE-2008-3880

ubuntu

почти 18 лет назад

SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter.

CVE-2008-3880

nvd

почти 18 лет назад

SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter.

CVE-2008-3880

debian

почти 18 лет назад

SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1. ...

GHSA-fg4c-q4wp-fvrw

github

около 4 лет назад

SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter.

EPSS

Процентиль: 62%

0.0108

Низкий