← Database

CVE-2008-1381

HIGH CVSS: 7.5 Published: 2008-05-01 Modified: 2026-06-16

Description

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

Affected Platforms

Zoneminder Zoneminder

Weakness Type

CWE-94

References