CVE-2019-8429
ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php fil ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Ubuntu (medium).
Description
ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| debian 11 | zoneminder | no fix listed |
| debian 12 | zoneminder | no fix listed |
| debian 13 | zoneminder | no fix listed |
| debian 14 | zoneminder | no fix listed |
| echo | zoneminder | no fix listed |
| rapidfort debian 12 | zoneminder | no fix listed |
| rapidfort debian 13 | zoneminder | no fix listed |
| rapidfort ubuntu 20.04 | zoneminder | no fix listed |
| rapidfort ubuntu 22.04 | zoneminder | no fix listed |
| rapidfort ubuntu 24.04 | zoneminder | no fix listed |
| ubuntu 20.04-ESM | zoneminder | no fix listed |
| ubuntu 22.04 | zoneminder | no fix listed |
Show all 15 entries from 15 sources
| Source | Package | Fixed in |
|---|---|---|
| debian 11 | zoneminder | no fix listed |
| debian 12 | zoneminder | no fix listed |
| debian 13 | zoneminder | no fix listed |
| debian 14 | zoneminder | no fix listed |
| echo | zoneminder | no fix listed |
| rapidfort debian 12 | zoneminder | no fix listed |
| rapidfort debian 13 | zoneminder | no fix listed |
| rapidfort ubuntu 20.04 | zoneminder | no fix listed |
| rapidfort ubuntu 22.04 | zoneminder | no fix listed |
| rapidfort ubuntu 24.04 | zoneminder | no fix listed |
| ubuntu 20.04-ESM | zoneminder | no fix listed |
| ubuntu 22.04 | zoneminder | no fix listed |
| ubuntu 24.04 | zoneminder | no fix listed |
| ubuntu 26.04 | zoneminder | no fix listed |
| ubuntu 26.10 | zoneminder | no fix listed |