9 matches found
sqli-hunter-CVE-2024-51482-PoC
sqli-hunter-CVE-2024-51482-PoC CVE-2024-51482 ZoneMinder SQLi 공격을 위한 Python 스크립트 — HTB CCTV sqli-hunter — CVE-2024-51482 설명 이 스크립트는 CVE-2024-51482를 악용하여 데이터베이스, 테이블, 열 및 자격 증명을 자동으로 추출합니다. 이 취약점은 ZoneMinder ≤ 1.37.64의 removetag 엔드포인트에 있는 tid 매개변수의 Boolean 기반 SQL Injection입니다. web/ajax/event.php의...
CVE-2024-51482-POC
ZoneMinder 인증된 시간 기반 SQLi PoC - CVE-2024-51482 ⚠️ 교육 목적 및 공인된 보안 연구용입니다. 소유하지 않거나 서면 허가 없이 테스트할 권한이 없는 시스템에 대해 이 도구를 실행하는 것은 불법 입니다. 목차 ZoneMinder 인증된 시간 기반 SQLi PoC - CVE-2024-51482 목차 개요 취약점 세부 정보 CVE-2024-51482 — 시간 기반 블라인드 SQL 인젝션 근본 원인 공격 흐름 저장소 구조 요구 사항 설치 PoC Docker 실습 환경 사용법 기본 동작 도움말 화면...
Exploit for CVE-2024-51482
CVE-2024-51482 — ZoneMinder Time-Based Blind SQL Injection A...
Exploit for CVE-2024-51482
CVE-2024-51482-PoC Authenticated time-based blind SQL injecti...
Exploit for CVE-2024-51482
CVE-2024-51482 ZoneMinder v1.37. = 1.37.64 CVE-2024-51482 po...
CVE-2024-51482
creationtimestamp| type| source ---|---|--- 2024-10-31 20:17:05+00:00| seen| https://t.me/cvedetector/9519 2024-11-29 08:55:11+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-51482.yaml 2025-06-08 03:00:06+00:00| published-proof-of-concept|...
CVE-2024-51482 Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64
ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...
CVE-2024-51482 Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64
ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...
CVE-2024-51482
ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...