SQL Injection

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. ZoneMinder v1.37.* <= 1.37.64 - SQL InjectionCVE-2024-51482ZoneMinder · CVSS 10 · 37% likely

   CWE-89

2. ZoneMinder - SQL InjectionCVE-2024-43360ZoneMinder · CVSS 9.8 · 6.2% likely

   CWE-89

3. ZoneMinder SQL InjectionCVE-2023-26034ZoneMinder · CVSS 9.6 · 1.6% likely

   CWE-89

4. ZoneMinder contains SQL injection via malicious Jason Web TokenCVE-2023-26032ZoneMinder · CVSS 8.9 · 0.6% likely

   CWE-89

5. ZoneMinder contains SQL Injection via report_event_auditCVE-2023-26037ZoneMinder · CVSS 8.9 · 0.6% likely

   CWE-89

6. ZoneMinder: Second-Order SQL Injection in `getNearEvents()` via Stored Event Name and Cause FieldsCVE-2026-27470ZoneMinder · CVSS 8.8 · 0.5% likely

   CWE-89

7. ZoneMinder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in watch.phpCVE-2023-41884ZoneMinder · CVSS 7.1 · 0.5% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.