CVE-2022-29806

Related Files

Ubuntu Security Notice USN-5889-1

Posted Feb 27, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5889-1 - It was discovered that ZoneMinder was not properly sanitizing URL parameters for certain views. An attacker could possibly use this issue to perform a cross-site scripting attack. This issue was only fixed in Ubuntu 16.04 ESM. It was discovered that ZoneMinder was not properly sanitizing stored user input later printed to the user in certain views. An attacker could possibly use this issue to perform a cross-site scripting attack. This issue was only fixed in Ubuntu 16.04 ESM.

tags | advisory, xss

systems | linux, ubuntu

advisories | CVE-2019-6777, CVE-2019-6991, CVE-2019-6992, CVE-2019-7325, CVE-2019-7326, CVE-2019-7329, CVE-2019-7331, CVE-2019-7332, CVE-2022-29806

SHA-256 | 6b120da55eab087c0cb072933998f2bda4b9791a794906828b299c06d119142d

Download | Favorite | View

ZoneMinder Language Settings Remote Code Execution

Posted May 5, 2022

Authored by krastanoel | Site metasploit.com

This Metasploit module exploits an arbitrary file write in the debug log file option chained with a path traversal in the language settings that leads to remote code execution in ZoneMinder surveillance software versions before 1.36.13 and before 1.37.11

tags | exploit, remote, arbitrary, code execution

advisories | CVE-2022-29806

SHA-256 | de41d6871c9da39a780698ac61a0da551342a2766821ef00b00ff323d0ac1fe6

Download | Favorite | View