EDB-24310
functionalZoneMinder Video Server - packageControl Command Execution (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2013-01-24catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-0332US | medium5.0 | Exploit | ||
Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) view, (2) request, or (… | ||||
| CVE-2013-0232US | high7.5 | Exploit | ||
includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState par… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan