CVE-2008-1381

CVE-2008-1381 describes a command injection vulnerability in ZoneMinder versions prior to 1.23.3, allowing remote authenticated users, and potentially unauthenticated attackers, to execute arbitrary commands through shell metacharacters in a crafted URL. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the vulnerability's nature makes it a critical concern for affected ZoneMinder installations.