CVE-2024-45178

The za-internet C-MOR Video Surveillance version 5.2401 is vulnerable to a Relative Path Traversal (CWE-23) due to insufficient input validation. Specifically, the scripts download-bkf.pml (via the bkf parameter) and show-movies.pml (via the cam parameter) allow an authenticated user to download ...