Unrated
skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] param...
CVE-2019-8426
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-8426 zoneminder Fixed in: 1.34.6-1
- Ubuntu UBUNTU-CVE-2019-8426 zoneminder
References
- report github.com
- report seebug.org