CVE-2024-45178

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to download arbitrary files from the C-MOR system via a path traversal attack. It was found out that different functionalities are vulnerable to path traversal attacks, du...

CVE-2024-45178

The za-internet C-MOR Video Surveillance version 5.2401 is vulnerable to a Relative Path Traversal (CWE-23) due to insufficient input validation. Specifically, the scripts download-bkf.pml (via the bkf parameter) and show-movies.pml (via the cam parameter) allow an authenticated user to download ...

CVE-2024-45178

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to download arbitrary files from the C-MOR system via a path traversal attack. It was found out that different functionalities are vulnerable to path traversal attacks, du...