← back
CVE-2008-1381

CVE-2008-1381

EPSS 2.5%
ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/29995http://secunia.com/advisories/30189https://exchange.xforce.ibmcloud.com/vulnerabilities/42046https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00078.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-May/msg00085.htmlhttp://www.awe.com/mark/blog/200804272230.htmlhttp://www.securityfocus.com/bid/28968http://www.zoneminder.com/wiki/index.php/Change_History#Release_1.23.3