Za-internet vulnerabilities
We track 7 vulnerabilities in Za-internet products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2024.
Latest Za-internet vulnerabilities
- 7.2 High severity
c-mor_video_surveillance: Improper Validation of Unsafe Equivalence in Input
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to insufficient input validation, the C-MOR web interface is vulnerable to OS command injection attacks. It was found out that different functionality is vulnerable to OS
- 8.8 High severity
c-mor_video_surveillance: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Sensitive information is stored in cleartext. It was found out that sensitive information, for example login credentials of cameras, is stored in cleartext. Thus, an attacker with filesyst
- 8.8 High severity
c-mor_video_surveillance: Unrestricted Upload of File with Dangerous Type
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to upload dangerous files, for instance PHP code, to the C-MOR system. By analyzing the C-MOR web interface, it was found out that the
- 7.1 High severity
c-mor_video_surveillance: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to download arbitrary files from the C-MOR system via a path traversal attack. It was found out that different functionalities are vul
- 8.8 High severity
c-mor_video_surveillance: Improper Privilege Management
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper privilege management concerning sudo privileges, C-MOR is vulnerable to a privilege escalation attack. The Linux user www-data running the C-MOR web interface can execute s
- 8.1 High severity
c-mor_video_surveillance: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper validation of user-supplied data, different functionalities of the C-MOR web interface are vulnerable to SQL injection attacks. This kind of attack allows an a
- 8.1 High severity
c-mor_video_surveillance: Improper Access Control
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or missing access control, low privileged users can use administrative functions of the C-MOR web interface. It was found out that different functions are only available to