CVE-2008-3882

Published: Sep 2, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php.

Affected (37)

Products: Zoneminder: Zoneminder

Zoneminder

1 product

Zoneminder

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Zoneminder Zoneminder	Up to 1.23.3
Zoneminder Zoneminder	Version 0.0.1
Zoneminder Zoneminder	Version 0.9.10
Zoneminder Zoneminder	Version 0.9.11
Zoneminder Zoneminder	Version 0.9.12
Zoneminder Zoneminder	Version 0.9.13
Zoneminder Zoneminder	Version 0.9.14
Zoneminder Zoneminder	Version 0.9.15
Zoneminder Zoneminder	Version 0.9.16
Zoneminder Zoneminder	Version 0.9.7
Zoneminder Zoneminder	Version 0.9.8
Zoneminder Zoneminder	Version 0.9.9
Zoneminder Zoneminder	Version 1.17.0
Zoneminder Zoneminder	Version 1.17.1
Zoneminder Zoneminder	Version 1.17.2
Zoneminder Zoneminder	Version 1.18.0
Zoneminder Zoneminder	Version 1.18.1
Zoneminder Zoneminder	Version 1.19.0
Zoneminder Zoneminder	Version 1.19.1
Zoneminder Zoneminder	Version 1.19.2
Zoneminder Zoneminder	Version 1.19.3
Zoneminder Zoneminder	Version 1.19.4
Zoneminder Zoneminder	Version 1.19.5
Zoneminder Zoneminder	Version 1.20.0
Zoneminder Zoneminder	Version 1.20.1
Zoneminder Zoneminder	Version 1.21.0
Zoneminder Zoneminder	Version 1.21.1
Zoneminder Zoneminder	Version 1.21.2
Zoneminder Zoneminder	Version 1.21.3
Zoneminder Zoneminder	Version 1.21.4
Zoneminder Zoneminder	Version 1.22.0
Zoneminder Zoneminder	Version 1.22.1
Zoneminder Zoneminder	Version 1.22.2
Zoneminder Zoneminder	Version 1.22.3
Zoneminder Zoneminder	Version 1.23.0
Zoneminder Zoneminder	Version 1.23.1
Zoneminder Zoneminder	Version 1.23.2