PT-2019-18534 · Zoneminder+3 · Zoneminder+3

Loginsoft-Research · Publicado 2019-02-04 · Atualizado 2023-02-27 · CVE-2019-7329

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4

Description A Reflected Cross Site Scripting (XSS) issue exists due to the insecure use of $ SERVER['PHP SELF'] in the form action on multiple views. This mishandles arbitrary input appended to the webroot URL, leading to XSS, as there is no proper filtration of the input.

Recommendations For versions prior to 1.32.4, update to version 1.32.4 or later to resolve the issue. As a temporary workaround, consider implementing proper input filtration for the $ SERVER['PHP SELF'] variable to prevent XSS attacks.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

ALT-PU-2020-1092

ALT-PU-2020-1246

CVE-2019-7329

USN-5889-1

Produtos afetados

Alt Linux

Linuxmint

Ubuntu

Zoneminder

Referências · 30

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminder_lang_exec.rb · Exploit
• 🔥 https://github.com/ZoneMinder/zoneminder/issues/2446 · Exploit
• 🔥 https://github.com/LoRexxar/CVE_Request/tree/master/zoneminder%20vul%20before%20v1.32.3#skinsclassicviewscontrolphp-line-35-second-order-sqli · Exploit
• 🔥 https://github.com/LoRexxar/CVE_Request/tree/master/zoneminder%20vul%20before%20v1.32.3#ajaxstatusphp-line-393-sql-injection · Exploit
• 🔥 https://github.com/LoRexxar/CVE_Request/tree/master/zoneminder%20vul%20before%20v1.32.3#ajaxstatusphp-line-276-orderby-sql-injection · Exploit
• 🔥 https://github.com/LoRexxar/CVE_Request/tree/master/zoneminder%20vul%20before%20v1.32.3#skinsclassicviewscontrolcapphp-reflected-xss · Exploit
• 🔥 https://github.com/LoRexxar/CVE_Request/tree/master/zoneminder%20vul%20before%20v1.32.3#sql-query-error-reflected-xss · Exploit
• 🔥 https://github.com/LoRexxar/CVE_Request/tree/master/zoneminder%20vul%20before%20v1.32.3#skinsclassicviewseventsphp-line-44-sql-injection · Exploit
• 🔥 https://github.com/LoRexxar/CVE_Request/tree/master/zoneminder%20vul%20before%20v1.32.3#includesfunctionsphp-daemoncontrol-command-injection · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-7329 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-7329 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-7329 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-6990 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-7330 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2022-29806 · Aviso do Fabricante