Page 9 of 82 results (0.002 seconds)

CVSS: 9.8EPSS: 1%CPEs: 36EXPL: 0

CVE-2008-1381

https://notcve.org/view.php?id=CVE-2008-1381

01 May 2008 — ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL. ZoneMinder anterior a la 1.23.3 permite a usuarios remotos autenticados, y posiblemente sin autenticar, ataques en algunas instalaciones, ejecutar comandos arbitrarios a través de metacaracteres shell en una URL manipulada. • http://secunia.com/advisories/29995 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 9.8EPSS: 6%CPEs: 7EXPL: 0

CVE-2004-0227

https://notcve.org/view.php?id=CVE-2004-0227

12 May 2004 — Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string. Desbordamiento de búfer en el script zms en ZineMinder anteriores a 1.19.2 puede permitir a un atacante remotos ejecutar código arbitrario mediante una cadena de consulta larga. • http://www.securityfocus.com/bid/10340 •