Unrated
ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.
CVE-2019-8424
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-8424 zoneminder Fixed in: 1.34.6-1
- Ubuntu UBUNTU-CVE-2019-8424 zoneminder
References
- report github.com
- report seebug.org