CVE-2008-3881
published 2008-09-02CVE-2008-3881: Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via…
PriorityP415medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.06%
60.5th percentile
Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zm_html_view_*.php" files.
Affected
42 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | zoneminder | < zoneminder 1.24.1-1 (bookworm) | zoneminder 1.24.1-1 (bookworm) |
| zoneminder | zoneminder | <= 1.23.3 | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
| zoneminder | zoneminder | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_redhat7.5HIGH
vendor_debian4.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
zoneminder: command injection, SQL injection and multiple XSS issues (CVE-2008-3882, CVE-2008-3880, CVE-2008-3881)
vendor_redhat·2008-08-26·CVSS 7.5
CVE-2008-3880 [HIGH] CWE-77 zoneminder: command injection, SQL injection and multiple XSS issues (CVE-2008-3882, CVE-2008-3880, CVE-2008-3881)
zoneminder: command injection, SQL injection and multiple XSS issues (CVE-2008-3882, CVE-2008-3880, CVE-2008-3881)
SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter.
Debian
CVE-2008-3881: zoneminder - Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and ear...
vendor_debian·2008·CVSS 4.3
CVE-2008-3881 [MEDIUM] CVE-2008-3881: zoneminder - Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and ear...
Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zm_html_view_*.php" files.
Scope: local
bookworm: resolved (fixed in 1.24.1-1)
bullseye: resolved (fixed in 1.24.1-1)
forky: resolved (fixed in 1.24.1-1)
sid: resolved (fixed in 1.24.1-1)
trixie: resolved (fixed in 1.24.1-1)
GHSA
GHSA-rwrr-6cq9-73w2: Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1
ghsa_unreviewed·2022-05-02
CVE-2008-3881 [MEDIUM] CWE-79 GHSA-rwrr-6cq9-73w2: Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1
Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zm_html_view_*.php" files.
OSV
CVE-2008-3881: Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1
osv·2008-09-02·CVSS 4.3
CVE-2008-3881 [MEDIUM] CVE-2008-3881: Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1
Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zm_html_view_*.php" files.
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/31636http://www.securityfocus.com/archive/1/495745/100/0/threadedhttp://www.securityfocus.com/bid/30843https://exchange.xforce.ibmcloud.com/vulnerabilities/44725http://secunia.com/advisories/31636http://www.securityfocus.com/archive/1/495745/100/0/threadedhttp://www.securityfocus.com/bid/30843https://exchange.xforce.ibmcloud.com/vulnerabilities/44725
2008-09-02
Published