CVE-2019-7330
04.02.2019, 19:29
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame (frame.php) because proper filtration is omitted.
| Vendor | Product | Version |
|---|---|---|
| zoneminder | zoneminder | 𝑥 ≤ 1.32.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases