Security Advisory

CVE-2008-3882

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-09-02 15:00:00
Last updated 2024-08-07 09:53:00
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php.