critical9.8
CVE-2016-10204
SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query req…
Impact
SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zoneminder | Zoneminder | through 1.30.0 |