漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to download arbitrary files from the C-MOR system via a path traversal attack. It was found out that different functionalities are vulnerable to path traversal attacks, due to insufficient user input validation. For instance, the download functionality for backups provided by the script download-bkf.pml is vulnerable to a path traversal attack via the parameter bkf. This enables an authenticated user to download arbitrary files as Linux user www-data from the C-MOR system. Another path traversal attack is in the script show-movies.pml, which can be exploited via the parameter cam.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
za-internet C-MOR Video Surveillance 安全漏洞
Vulnerability Description
za-internet C-MOR Video Surveillance是德国za-internet公司的一个网络视频监控系统。 za-internet C-MOR Video Surveillance 5.2401 版本存在安全漏洞，该漏洞源于输入验证不当，导致路径遍历。
CVSS Information
N/A
Vulnerability Type
N/A