Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57803
HistoryApr 01, 2022 - 12:00 a.m.

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57803)

2022-04-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
zoneminder
cross-site scripting
vulnerability
video surveillance
software
remote attackers
html
javascript
username parameter

EPSS

0.001

Percentile

37.8%

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and previous versions, which can be exploited by remote attackers to execute HTML or JavaScript code with the help of the ‘username’ parameter.