CVE-2023-31493
RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate…
Published: 2024-10-15 · CVSS: 6.6 · CVSS 3.1
RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7