| Package | Affected versions | Patched versions |
|---|---|---|
| zoneminder | = 1.36.34 |
ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() function. NOTE: this is disputed by the Supplier because there is no unsanitized user input to web/views/image.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free