CVE-2024-43360: ZoneMinder Time-based SQL Injection

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-43360

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

ZoneMinder Time-based SQL Injection

Source: NVD (National Vulnerability Database)

Vulnerability Description

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vulnerability is fixed in 1.36.34 and 1.37.61.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: NVD (National Vulnerability Database)

Vulnerability Type

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

Source: NVD (National Vulnerability Database)

Vulnerability Title

ZoneMinder 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

ZoneMinder是一套开源的视频监控软件系统。该系统支持IP、USB和模拟摄像机等。 ZoneMinder存在安全漏洞，该漏洞源于包含一个基于时间的 SQL 注入漏洞。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
ZoneMinder	zoneminder	< 1.36.34	-

II. Public POCs for CVE-2024-43360

#	POC Description	Source Link	Shenlong Link
1	ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vulnerability is fixed in 1.36.34 and 1.37.61.	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43360.yaml	POC Details

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2024-43360

Please Login to view more intelligence information

https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-9cmr-7437-v9fjx_refsource_CONFIRM
https://github.com/ZoneMinder/zoneminder/commit/bb07118118e23b5670c2c18be8be2cc6b8529397x_refsource_MISC
https://github.com/ZoneMinder/zoneminder/commit/a194fe81d34c5eea2ab1dc18dc8df615fca634a6x_refsource_MISC
https://github.com/ZoneMinder/zoneminder/commit/de8f387207e9c506e8e8007eda725741a25601c5x_refsource_MISC
https://github.com/ZoneMinder/zoneminder/commit/677f6a31551f128554f7b0110a52fd76453a657ax_refsource_MISC
https://nvd.nist.gov/vuln/detail/CVE-2024-43360

New Vulnerabilities

Product: zoneminder

Vendor: ZoneMinder

Same weakness: CWE-89

V. Comments for CVE-2024-43360

No comments yet

Support Us — Your donation helps us keep running

I. Basic Information for CVE-2024-43360

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2024-43360

III. Intelligence Information for CVE-2024-43360

New Vulnerabilities

V. Comments for CVE-2024-43360

Leave a comment