Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2024-51482

Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64

Description

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZoneMinder zoneminder

  • >= 1.37.0, < 1.37.65affected

References