Name: CVE-2019-8423: Improper Neutralization of Special Elements used in an SQL Command
Published: 2019-02-18T00:00:00.000Z
Keywords: CVE, CVE-2019-8423, CWE-89, CVSS 9.8, EPSS 0.01614

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	View advisory ↗View advisory ↗	alpine-linux-upgrade-zoneminder	Aug 22, 2024	Feb 18, 2019
Debian	View advisory ↗	no-fix-debian-deb-package	May 15, 2025	Feb 18, 2019
Ubuntu	View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗	no-fix-ubuntu-package	Jun 26, 2025	Feb 18, 2019

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub