Vulnerability Database

290,300

Total vulnerabilities in the database

CVE-2013-0232

includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command parameter in the setDeviceStatusX10 function.

  • Published: Mar 20, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-0232
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
zoneminder / zoneminder 1.24.3 1.24.3.x
zoneminder / zoneminder 1.24.0 1.24.0.x
zoneminder / zoneminder 1.24.4 1.24.4.x
zoneminder / zoneminder 1.24.1 1.24.1.x
zoneminder / zoneminder 1.25.0 1.25.0.x
zoneminder / zoneminder 1.24.2 1.24.2.x