High severity8.1NVD Advisory· Published Sep 4, 2024· Updated Jun 17, 2026
CVE-2024-45174
CVE-2024-45174
Description
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper validation of user-supplied data, different functionalities of the C-MOR web interface are vulnerable to SQL injection attacks. This kind of attack allows an authenticated user to execute arbitrary SQL commands in the context of the corresponding MySQL database.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: 5.2401, 6.00PL01
- Range: 5.2401, 6.00PL01
Patches
Vulnerability mechanics
References
3- seclists.org/fulldisclosure/2024/Sep/11nvdExploitMailing ListThird Party Advisory
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-023.txtnvdExploitVendor Advisory
- www.syss.de/pentest-blog/mehrere-sicherheitsschwachstellen-in-videoueberwachungssoftware-c-mor-syss-2024-020-bis-030nvdVendor Advisory
News mentions
0No linked articles in our index yet.