Security Advisory
CVE-2019-8428
9.8
CRITICAL
Vulnerability Description
ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value.
Published Date
February 18, 2019
Official Source
NIST NVD Advisory