CVEvulnerability

CVE-2024-45174

8.1 HIGH Published 2024-09-04 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2024-09-04
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses: CWE-89

Description

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper validation of user-supplied data, different functionalities of the C-MOR web interface are vulnerable to SQL injection attacks. This kind of attack allows an authenticated user to execute arbitrary SQL commands in the context of the corresponding MySQL database.

Affected configurations

• c-mor c-mor video surveillance 5.2401 • c-mor c-mor video surveillance 6.00

Weakness · CWE (1)

CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-023.txt Exploit, Vendor Advisory
https://www.syss.de/pentest-blog/mehrere-sicherheitsschwachstellen-in-videoueberwachungssoftware-c-mor-syss-2024-020-bis-030 Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/11 Exploit, Mailing List, Third Party Advisory

CVE-2024-45174

Description

Affected configurations

Related

Weakness · CWE (1)

References