CVE 2019-8424

ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.

See the

CVE page on Mitre.org for more details.

References