CVE-2024-45170

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or missing access control, low privileged users can use administrative functions of the C-MOR web interface. It was found out that different functions are only available to administrative users. However, acces...

CVE-2024-45174

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper validation of user-supplied data, different functionalities of the C-MOR web interface are vulnerable to SQL injection attacks. This kind of attack allows an authenticated user to execute arbitrar...

CVE-2024-45172

The CVE-2024-45172 entry describes CSRF vulnerability in za-internet C-MOR Video Surveillance web interface for versions 5.2401 and 6.00PL01 due to missing protection mechanisms. Affected component is the C-MOR web interface; root cause is lack of CSRF protection. Documented impact is that CSRF c...