Unrated

ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] val...

CVE-2019-8428 First seen on SecPulse Feb 18, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2019-8428 zoneminder Fixed in: 1.34.6-1
Ubuntu UBUNTU-CVE-2019-8428 zoneminder

Original description The description as published by the source.

ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report github.com
report seebug.org

Key facts

Severity: Unrated
Published: Feb 18, 2019
First seen on SecPulse: Feb 18, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51