CVE

Id
33999  
CVE No.
CVE-2008-3882  
Status
Candidate  
Description
Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php.  
Phase
Assigned (20080902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
371288 33999 CVE-2008-3882 BUGTRAQ:20080826 ZoneMinder Multiple Vulnerabilities  View
371289 33999 CVE-2008-3882 URL:http://www.securityfocus.com/archive/1/archive/1/495745/100/0/threaded  View
371290 33999 CVE-2008-3882 BID:30843  View
371291 33999 CVE-2008-3882 URL:http://www.securityfocus.com/bid/30843  View
371292 33999 CVE-2008-3882 SECUNIA:31636  View
371293 33999 CVE-2008-3882 URL:http://secunia.com/advisories/31636  View
371294 33999 CVE-2008-3882 XF:zoneminder-htmlviewevents-command-execution(44728)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48085 JVNDB-2008-003395 dotProject の index.php におけるクロスサイトスクリプティングの脆弱性 dotProject の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3886 33999 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003395.html  View