daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.
{ "ubuntu_priority": "medium" }