ZoneMinder CVE-2016-10202 Cross Site Scripting Vulnerability

Bugtraq ID:	98695
Class:	Input Validation Error
CVE:	CVE-2016-10202
Remote:	Yes
Local:	No
Published:	Mar 03 2017 12:00AM
Updated:	Mar 03 2017 12:00AM
Credit:	FOXMOLE employee Tim Herres
Vulnerable:	Zoneminder Zoneminder 1.23.3 Zoneminder Zoneminder 1.23.2 Zoneminder Zoneminder 1.23.1 Zoneminder Zoneminder 1.23 Zoneminder Zoneminder 1.22.1 Zoneminder Zoneminder 1.21.4 Zoneminder Zoneminder 1.21.3 Zoneminder Zoneminder 1.21.2 Zoneminder Zoneminder 1.21.1 Zoneminder Zoneminder 1.21 Zoneminder Zoneminder 1.20 Zoneminder Zoneminder 1.19.5 Zoneminder Zoneminder 1.19.4 Zoneminder Zoneminder 1.19.3 Zoneminder Zoneminder 1.19.2 Zoneminder Zoneminder 1.19.1 Zoneminder Zoneminder 1.19 Zoneminder Zoneminder 1.18.1 Zoneminder Zoneminder 1.18 Zoneminder Zoneminder 1.17.2 Zoneminder Zoneminder 1.17.1 Zoneminder Zoneminder 1.17 Zoneminder Zoneminder 0.9.16 Zoneminder Zoneminder 0.9.14 Zoneminder Zoneminder 0.9.13 Zoneminder Zoneminder 0.9.12 Zoneminder Zoneminder 0.9.11 Zoneminder Zoneminder 0.9.9 Zoneminder Zoneminder 0.1.1 Zoneminder Zoneminder 1.30 Zoneminder Zoneminder 1.29 Zoneminder Zoneminder 1.22.3 Zoneminder Zoneminder 1.22.2 Zoneminder Zoneminder 1.20.1 Zoneminder Zoneminder 1.0 Zoneminder Zoneminder 0.9.8 Zoneminder Zoneminder 0.9.7 Zoneminder Zoneminder 0.9.15 Zoneminder Zoneminder 0.9.10
Not Vulnerable:

ZoneMinder CVE-2016-10202 Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

ZoneMinder CVE-2016-10202 Cross Site Scripting Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].