Total vulnerabilities in the database
RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system.
| Software | From | Fixed in |
|---|---|---|
| zoneminder / zoneminder | - | 1.36.33.x |