[SYSS-2024-023]: C-MOR Video Surveillance - SQL Injection (CWE-89)

Posted by Matthias Deeg via Fulldisclosure on Sep 05Advisory ID: SYSS-2024-023 Product: C-MOR Video Surveillance Manufacturer: za-internet GmbH Affected Version(s): 5.2401, 6.00PL01 Tested Version(s): 5.2401, 6.00PL01 Vulnerability Type: SQL Injection (CWE-89) Risk Level: High Solution Status: Open Manufacturer Notification: 2024-04-05 Solution Date: - Public Disclosure: 2024-09-04 CVE...