CVE-2008-3882
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php.
Affected Platforms (CPE)
📦
Zoneminder
Zoneminder
<= 1.23.3📦
Zoneminder
Zoneminder
= 0.0.1📦
Zoneminder
Zoneminder
= 0.9.7📦
Zoneminder
Zoneminder
= 0.9.8📦
Zoneminder
Zoneminder
= 0.9.9📦
Zoneminder
Zoneminder
= 0.9.10📦
Zoneminder
Zoneminder
= 0.9.11📦
Zoneminder
Zoneminder
= 0.9.12📦
Zoneminder
Zoneminder
= 0.9.13📦
Zoneminder
Zoneminder
= 0.9.14📦
Zoneminder
Zoneminder
= 0.9.15📦
Zoneminder
Zoneminder
= 0.9.16📦
Zoneminder
Zoneminder
= 1.17.0📦
Zoneminder
Zoneminder
= 1.17.1📦
Zoneminder
Zoneminder
= 1.17.2📦
Zoneminder
Zoneminder
= 1.18.0📦
Zoneminder
Zoneminder
= 1.18.1📦
Zoneminder
Zoneminder
= 1.19.0📦
Zoneminder
Zoneminder
= 1.19.1📦
Zoneminder
Zoneminder
= 1.19.2📦
Zoneminder
Zoneminder
= 1.19.3📦
Zoneminder
Zoneminder
= 1.19.4📦
Zoneminder
Zoneminder
= 1.19.5📦
Zoneminder
Zoneminder
= 1.20.0📦
Zoneminder
Zoneminder
= 1.20.1📦
Zoneminder
Zoneminder
= 1.21.0📦
Zoneminder
Zoneminder
= 1.21.1📦
Zoneminder
Zoneminder
= 1.21.2📦
Zoneminder
Zoneminder
= 1.21.3📦
Zoneminder
Zoneminder
= 1.21.4📦
Zoneminder
Zoneminder
= 1.22.0📦
Zoneminder
Zoneminder
= 1.22.1📦
Zoneminder
Zoneminder
= 1.22.2📦
Zoneminder
Zoneminder
= 1.22.3📦
Zoneminder
Zoneminder
= 1.23.0📦
Zoneminder
Zoneminder
= 1.23.1📦
Zoneminder