CVE-2008-3880: SQL Injection
Published Sep 2, 2008
·Updated
SQL injection vulnerability in zmhtmlviewevent.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter.
Affected Software
37 affected components
ZoneMinder Zoneminder=1.21.1
ZoneMinder Zoneminder=1.23.1
ZoneMinder Zoneminder=1.23.0
ZoneMinder Zoneminder=1.19.1
ZoneMinder Zoneminder=1.19.4
ZoneMinder Zoneminder=0.9.11
ZoneMinder Zoneminder=1.21.3
ZoneMinder Zoneminder=1.21.2
ZoneMinder Zoneminder<=1.23.3
ZoneMinder Zoneminder=0.9.8
ZoneMinder Zoneminder=0.9.10
ZoneMinder Zoneminder=1.18.1
ZoneMinder Zoneminder=1.21.0
ZoneMinder Zoneminder=0.9.9
ZoneMinder Zoneminder=0.9.14
ZoneMinder Zoneminder=1.22.2
ZoneMinder Zoneminder=1.19.3
ZoneMinder Zoneminder=0.0.1
ZoneMinder Zoneminder=1.20.1
ZoneMinder Zoneminder=1.17.1
ZoneMinder Zoneminder=1.22.0
ZoneMinder Zoneminder=1.22.3
ZoneMinder Zoneminder=0.9.16
ZoneMinder Zoneminder=0.9.13
ZoneMinder Zoneminder=1.19.5
ZoneMinder Zoneminder=1.18.0
ZoneMinder Zoneminder=1.23.2
ZoneMinder Zoneminder=1.17.2
ZoneMinder Zoneminder=1.21.4
ZoneMinder Zoneminder=0.9.12
ZoneMinder Zoneminder=1.22.1
ZoneMinder Zoneminder=1.19.0
ZoneMinder Zoneminder=0.9.7
ZoneMinder Zoneminder=1.17.0
ZoneMinder Zoneminder=1.20.0
ZoneMinder Zoneminder=1.19.2
ZoneMinder Zoneminder=0.9.15
Event History
Sep 2, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3880?
CVE-2008-3880 is considered a critical severity vulnerability due to its potential for remote SQL command execution.
2
How do I fix CVE-2008-3880?
To fix CVE-2008-3880, update ZoneMinder to version 1.23.4 or later, which addresses this SQL injection vulnerability.
3
What versions of ZoneMinder are affected by CVE-2008-3880?
CVE-2008-3880 affects ZoneMinder versions 1.23.3 and earlier.
4
What is the nature of the vulnerability in CVE-2008-3880?
CVE-2008-3880 is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.
5
Is CVE-2008-3880 being actively exploited?
As of the latest updates, there are no confirmed active exploits specifically targeting CVE-2008-3880, but it remains a high-risk vulnerability.