Unscored CVE-2016-10202 EUVD-2016-1387GHSA-fxw3-544f-f645

Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via …

Published Mar 3, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Package: zoneminder Package: zoneminder Ecosystem: Debian Ecosystem: Ubuntu

Description

Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the path info to index.php.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	zoneminder	1.30.4+dfsg-1	—
Debian 13	zoneminder	1.30.4+dfsg-1	—
Debian 12	zoneminder	1.30.4+dfsg-1	—

Ubuntu