CVE-2024-45179

The za-internet C-MOR Video Surveillance versions 5.2401 and 6.00PL01 are vulnerable to OS command injection due to insufficient input validation in the web interface. The script generatesslreq.pml can be exploited by a low-privileged authenticated user to execute commands as the www-data user vi...