CVE-2008-3882: Code Injection
Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zmhtmlviewevents.php and (2) the runstate parameter to zmhtmlviewstate.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3882?
CVE-2008-3882 is considered a medium to high severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2008-3882?
To fix CVE-2008-3882, upgrade ZoneMinder to version 1.23.4 or later, which addresses the command injection vulnerability.
What versions of ZoneMinder are affected by CVE-2008-3882?
CVE-2008-3882 affects ZoneMinder versions 1.23.3 and earlier, including versions 0.0.1 through 1.23.3.
What type of vulnerability is CVE-2008-3882?
CVE-2008-3882 is a command injection vulnerability that allows attackers to execute arbitrary commands on the server.
Can CVE-2008-3882 be exploited remotely?
Yes, CVE-2008-3882 can be exploited remotely by attackers to execute arbitrary commands on the affected ZoneMinder installation.