CVE-2008-3881

Published: Sep 2, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zm_html_view_*.php" files.

Affected (37)

Products: Zoneminder: Zoneminder

Zoneminder

1 product

Zoneminder

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Zoneminder Zoneminder	Up to 1.23.3
Zoneminder Zoneminder	Version 0.0.1
Zoneminder Zoneminder	Version 0.9.10
Zoneminder Zoneminder	Version 0.9.11
Zoneminder Zoneminder	Version 0.9.12
Zoneminder Zoneminder	Version 0.9.13
Zoneminder Zoneminder	Version 0.9.14
Zoneminder Zoneminder	Version 0.9.15
Zoneminder Zoneminder	Version 0.9.16
Zoneminder Zoneminder	Version 0.9.7
Zoneminder Zoneminder	Version 0.9.8
Zoneminder Zoneminder	Version 0.9.9
Zoneminder Zoneminder	Version 1.17.0
Zoneminder Zoneminder	Version 1.17.1
Zoneminder Zoneminder	Version 1.17.2
Zoneminder Zoneminder	Version 1.18.0
Zoneminder Zoneminder	Version 1.18.1
Zoneminder Zoneminder	Version 1.19.0
Zoneminder Zoneminder	Version 1.19.1
Zoneminder Zoneminder	Version 1.19.2
Zoneminder Zoneminder	Version 1.19.3
Zoneminder Zoneminder	Version 1.19.4
Zoneminder Zoneminder	Version 1.19.5
Zoneminder Zoneminder	Version 1.20.0
Zoneminder Zoneminder	Version 1.20.1
Zoneminder Zoneminder	Version 1.21.0
Zoneminder Zoneminder	Version 1.21.1
Zoneminder Zoneminder	Version 1.21.2
Zoneminder Zoneminder	Version 1.21.3
Zoneminder Zoneminder	Version 1.21.4
Zoneminder Zoneminder	Version 1.22.0
Zoneminder Zoneminder	Version 1.22.1
Zoneminder Zoneminder	Version 1.22.2
Zoneminder Zoneminder	Version 1.22.3
Zoneminder Zoneminder	Version 1.23.0
Zoneminder Zoneminder	Version 1.23.1
Zoneminder Zoneminder	Version 1.23.2