CVE-2016-10204

2017-03-0315:59:00

Google

osv.dev

AI Score

8.6

Confidence

Low

EPSS

0.002

Percentile

54.0%

JSON

SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php.

References

www.openwall.com/lists/oss-security/2017/02/05/1

www.foxmole.com/advisories/foxmole-2016-07-05.txt