CVE-2008-3882
CVE-2008-3882
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php.
EPSS 3.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
zoneminder Debian:12
- Affected ranges
- ECOSYSTEM: < 1.24.1-1
Update to 1.24.1-1
zoneminder Debian:13
- Affected ranges
- ECOSYSTEM: < 1.24.1-1
Update to 1.24.1-1
zoneminder Debian:14
- Affected ranges
- ECOSYSTEM: < 1.24.1-1
Update to 1.24.1-1