Rezultati pretraživanja za 'Proizvođač: zoneminder'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-7345 | 3.5 | Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'options' (options.php) does no input validation for the WEB_TITLE, HOME_URL, HOME_CONTENT, or WEB_CONSOLE_BANNER value, allowing an attacker to execute HTML or | 2019-02-05 21:27:00 | 2019-02-04 19:29:00 |
| CVE-2019-7344 | 4.3 | Reflected XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'filter' as it insecurely prints the 'filter[Name]' (aka Filter name) value on the web page without applying any proper filtration. | 2019-02-05 21:27:00 | 2019-02-04 19:29:00 |
| CVE-2019-7343 | 4.3 | Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[Method]' parameter value in the view monitor (monitor.php) because proper filtration is o | 2019-02-05 21:26:00 | 2019-02-04 19:29:00 |
| CVE-2019-7342 | 4.3 | POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[AutoExecuteCmd]' parameter value in the view filter (filter.php) because proper filtration is omit | 2019-02-05 21:26:00 | 2019-02-04 19:29:00 |
| CVE-2019-7341 | 4.3 | Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[LinkedMonitors]' parameter value in the view monitor (monitor.php) because proper filtrat | 2019-02-05 21:26:00 | 2019-02-04 19:29:00 |
| CVE-2019-7340 | 4.3 | POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[Query][terms][0][val]' parameter value in the view filter (filter.php) because proper filtration i | 2019-02-05 21:25:00 | 2019-02-04 19:29:00 |
| CVE-2019-7339 | 4.3 | POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'level' parameter value in the view log (log.php) because proper filtration is omitted. | 2019-02-05 21:25:00 | 2019-02-04 19:29:00 |
| CVE-2019-7337 | 3.5 | Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view 'events' (events.php) insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHea | 2019-02-05 21:24:00 | 2019-02-04 19:29:00 |
| CVE-2019-7336 | 4.3 | Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view _monitor_filters.php contains takes in input from the user and saves it into the session, and retrieves it later (insecurely). The values of the MonitorName and | 2019-02-05 21:24:00 | 2019-02-04 19:29:00 |
| CVE-2019-7335 | 4.3 | Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on the web page without applying any proper filtration. This relates to t | 2019-02-05 21:23:00 | 2019-02-04 19:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/9
Zapisa po stranici: