CVE-2008-3882: Zoneminder

High severity, CVSS 10.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php.

Affected products

• Zoneminder Zoneminder: up to and including 1.23.3; version 0.0.1 only; version 0.9.7 only; version 0.9.8 only; version 0.9.9 only; version 0.9.10 only; …

Published 2008-09-02. Last modified 2026-06-16.