CVE-2008-1381

Published: May 1, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

Affected (36)

Products: Zoneminder: Zoneminder

Zoneminder

1 product

Zoneminder

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Zoneminder Zoneminder	Version 0.0.1
Zoneminder Zoneminder	Version 0.9.10
Zoneminder Zoneminder	Version 0.9.11
Zoneminder Zoneminder	Version 0.9.12
Zoneminder Zoneminder	Version 0.9.13
Zoneminder Zoneminder	Version 0.9.14
Zoneminder Zoneminder	Version 0.9.15
Zoneminder Zoneminder	Version 0.9.16
Zoneminder Zoneminder	Version 0.9.7
Zoneminder Zoneminder	Version 0.9.8
Zoneminder Zoneminder	Version 0.9.9
Zoneminder Zoneminder	Version 1.17.0
Zoneminder Zoneminder	Version 1.17.1
Zoneminder Zoneminder	Version 1.17.2
Zoneminder Zoneminder	Version 1.18.0
Zoneminder Zoneminder	Version 1.18.1
Zoneminder Zoneminder	Version 1.19.0
Zoneminder Zoneminder	Version 1.19.1
Zoneminder Zoneminder	Version 1.19.2
Zoneminder Zoneminder	Version 1.19.3
Zoneminder Zoneminder	Version 1.19.4
Zoneminder Zoneminder	Version 1.19.5
Zoneminder Zoneminder	Version 1.20.0
Zoneminder Zoneminder	Version 1.20.1
Zoneminder Zoneminder	Version 1.21.0
Zoneminder Zoneminder	Version 1.21.1
Zoneminder Zoneminder	Version 1.21.2
Zoneminder Zoneminder	Version 1.21.3
Zoneminder Zoneminder	Version 1.21.4
Zoneminder Zoneminder	Version 1.22.0
Zoneminder Zoneminder	Version 1.22.1
Zoneminder Zoneminder	Version 1.22.2
Zoneminder Zoneminder	Version 1.22.3
Zoneminder Zoneminder	Version 1.23.0
Zoneminder Zoneminder	Version 1.23.1
Zoneminder Zoneminder	Version 1.23.2