CVE-2024-45179

The za-internet C-MOR Video Surveillance (versions 5.2401 and 6.00PL01) is vulnerable to OS command injection due to insufficient input validation in the web interface. Vulnerable scripts include generatesslreq.pml, where a low-privileged authenticated user can execute commands as the www-data us...