Page 5 of 71 results (0.008 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-7338

https://notcve.org/view.php?id=CVE-2019-7338

04 Feb 2019 — Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'group' as it insecurely prints the 'Group Name' value on the web page without applying any proper filtration. Existe autocross-Site Scripting (XSS) persistente en ZoneMinder, hasta la versión 1.32.3, lo que permite que un atacante ejecute código HTML o JavaScript en la vista "group" ya que imprime el valor de "Group Name" de forma insegura en la página web sin aplicar ningún filtrado a... • https://github.com/ZoneMinder/zoneminder/issues/2454 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-7328

https://notcve.org/view.php?id=CVE-2019-7328

04 Feb 2019 — Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) via /js/frame.js.php because proper filtration is omitted. Existe Cross-Site Scripting (XSS) reflejado en ZoneMinder, hasta la versión 1.32.3, lo que permite que un atacante ejecute código HTML o JavaScript mediante un valor del parámetro "scale" vulnerable en la vista de frame (frame.php) mediante /js/frame.j... • https://github.com/ZoneMinder/zoneminder/issues/2449 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-7348

https://notcve.org/view.php?id=CVE-2019-7348

04 Feb 2019 — Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user (user.php) because proper filtration is omitted. Existe autocross-Site Scripting (XSS) persistente en ZoneMinder, hasta la versión 1.32.3, lo que permite que un atacante ejecute código HTML o JavaScript mediante un valor del parámetro "username" vulnerable en la vista de usuario (user.php) debido a que se omite un f... • https://github.com/ZoneMinder/zoneminder/issues/2467 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-7334

https://notcve.org/view.php?id=CVE-2019-7334

04 Feb 2019 — Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view export (export.php) because proper filtration is omitted. Existe Cross-Site Scripting (XSS) reflejado en ZoneMinder, hasta la versión 1.32.3, lo que permite que un atacante ejecute código HTML o JavaScript mediante un valor del parámetro "Exportfile" vulnerable en la vista de exportación (export.php) debido a que se omite ... • https://github.com/ZoneMinder/zoneminder/issues/2443 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-7352

https://notcve.org/view.php?id=CVE-2019-7352

04 Feb 2019 — Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka newState) field, allowing an attacker to execute HTML or JavaScript code. Existe autocross-Site Scripting (XSS) persistente en ZoneMinder, hasta la versión 1.32.3, ya que la vista "state" (también conocida como Run State, en options.php) no introduce validación para los valores proporcionados al campo New State (t... • https://github.com/ZoneMinder/zoneminder/issues/2475 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-7346

https://notcve.org/view.php?id=CVE-2019-7346

04 Feb 2019 — A CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a CSRF check fails, a callback function is called displaying a "Try again" button, which allows resending the failed request, making the CSRF attack successful. Existe un problema de validación Cross-Site Request Forgery (CSRF) en ZoneMinder, hasta la versión 1.32.3, ya que cuando una comprobación CSRF fracasa, se llama a una función de rellamada que muestra un botón "Try again", que permite reenviar la petición fallida. Esto hace que el ata... • https://github.com/ZoneMinder/zoneminder/issues/2469 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-7343

https://notcve.org/view.php?id=CVE-2019-7343

04 Feb 2019 — Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[Method]' parameter value in the view monitor (monitor.php) because proper filtration is omitted. Existe - Cross-Site Scripting (XSS) reflejado en ZoneMinder, hasta la versión 1.32.3, lo que permite que un atacante ejecute código HTML o JavaScript mediante un valor del parámetro "newMonitor[Method]" vulnerable en la vista de monitor (monitor.php) deb... • https://github.com/ZoneMinder/zoneminder/issues/2464 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-7330

https://notcve.org/view.php?id=CVE-2019-7330

04 Feb 2019 — Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame (frame.php) because proper filtration is omitted. Existe Cross-Site Scripting (XSS) reflejado en ZoneMinder, hasta la versión 1.32.3, lo que permite que un atacante ejecute código HTML o JavaScript mediante un valor del parámetro "show" vulnerable en la vista de frame (frame.php) debido a que se omite un filtrado adecuado. • https://github.com/ZoneMinder/zoneminder/issues/2448 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-7325 – Ubuntu Security Notice USN-5889-1

https://notcve.org/view.php?id=CVE-2019-7325

04 Feb 2019 — Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SELF'], without applying any proper filtration. Existe Cross-Site Scripting (XSS) reflejado en ZoneMinder, hasta la versión 1.32.3, ya que múltiples vistas bajo web/skins/classic/views emplean de forma insegura $_REQUEST['PHP_SELF'], sin aplicar ningún tipo de filtrado adecuado. It was discovered that ZoneMinder was not properly sanitizing URL parameters... • https://github.com/ZoneMinder/zoneminder/issues/2450 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-7340

https://notcve.org/view.php?id=CVE-2019-7340

04 Feb 2019 — POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[Query][terms][0][val]' parameter value in the view filter (filter.php) because proper filtration is omitted. Existe POST- Site Scripting (XSS) reflejado en ZoneMinder, hasta la versión 1.32.3, lo que permite que un atacante ejecute código HTML o JavaScript mediante un valor del parámetro "filter[Query][terms][0][val]" vulnerable en la vista de filtros (filte... • https://github.com/ZoneMinder/zoneminder/issues/2462 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •