cve/2024/CVE-2024-51482.md

CVE-2024-51482

Description

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65.

POC

Reference

• https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-qm8h-3xvf-m7j3

Github

• https://github.com/BwithE/CVE-2024-51482
• https://github.com/DymphnaMary/Vulnerability-Assessment-on-an-Open-Source-Monitoring-Application
• https://github.com/EssenceCyber/Exploit-List
• https://github.com/aadithpreetham/Vulnerability-Assessment-on-an-Open-Source-Monitoring-Application
• https://github.com/zulloper/cve-poc