CVE-2019-8426: XSS
Published Feb 18, 2019
·Updated
skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter.
Affected Software
1 affected component
ZoneMinder Zoneminder<1.32.3
Event History
Feb 18, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2019-8426?
CVE-2019-8426 is a vulnerability in ZoneMinder before 1.32.3 that allows for XSS (cross-site scripting) attacks via the newControl array.
2
How severe is CVE-2019-8426?
The severity of CVE-2019-8426 is medium, with a CVSS score of 6.1.
3
How does CVE-2019-8426 affect ZoneMinder?
CVE-2019-8426 affects ZoneMinder versions before 1.32.3.
4
What is the CWE ID of CVE-2019-8426?
The CWE ID of CVE-2019-8426 is CWE-79 (Cross-Site Scripting).
5
How can CVE-2019-8426 be exploited?
CVE-2019-8426 can be exploited by passing malicious input through the newControl array, specifically the newControl[MinTiltRange] parameter.