Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zoneminder 指令注入漏洞
Vulnerability Description
ZoneMinder是一款针对摄像机的安全监督软件。 ZoneMinder 1.23.3以及之前的版本存在未明"指令注入"漏洞。远程攻击者可以借助(1)zm_html_view_events.php中的执行过滤函数和(2)到zm_html_view_state.php的run_state参数,执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A