CVE-2019-7329
04.02.2019, 19:29
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS.
| Vendor | Product | Version |
|---|---|---|
| zoneminder | zoneminder | 𝑥 ≤ 1.32.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases