VYPR
← All advisories
High severity7.1NVD Advisory· Published Aug 12, 2024· Updated Jun 17, 2026

CVE-2023-41884

CVE-2023-41884

Description

ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34.

Affected products

3
  • Zoneminder/Zoneminder3 versions
    cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*range: <1.36.34
    • (no CPE)range: >=1.36.34
    • (no CPE)range: < 1.36.34

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.