CVE-2008-3882

no score yetEPSS 3.5%

zoneminder zoneminder: no CVSS score yet. EPSS 3.5% chance of exploitation in the next 30 days.

Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php.

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2008-09-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

zoneminder:zoneminder

References

http://secunia.com/advisories/31636
http://www.securityfocus.com/archive/1/495745/100/0/threaded
http://www.securityfocus.com/bid/30843
https://exchange.xforce.ibmcloud.com/vulnerabilities/44728
http://secunia.com/advisories/31636

Check your stack JSON