POC详情： 02b77aa077ce51af74b4f298fa023115956a0f62

来源
https://github.com/OP3R4T0R/CVE-2022-29806
关联漏洞
标题： ZoneMinder 路径遍历漏洞 (CVE-2022-29806)
描述：ZoneMinder是一套开源的视频监控软件系统。该系统支持IP、USB和模拟摄像机等。 ZoneMinder 1.36.13之前版本存在安全漏洞，该漏洞源于通过无效语言远程执行代码。
描述
ZoneMinder up to 1.36.12 Language privilege escalation (and RCE) - Poc Exploit
介绍
# CVE-2022-29806
ZoneMinder up to 1.36.12 Language privilege escalation (and RCE)

![alt img](image.png)

### Description
A Path Traversal vulnerability in debug log file and default language option in ZoneMinder version before 1.36.13 and 1.37.11 allows attackers to write and execute arbitrary code to achieve remote command execution.

"The proof of concept was tested against ZoneMinder 1.36.4 ubuntu18.04 docker: ZoneMinder/zmdockerfiles but will still applicable up to the latest version 1.36.12"

### Usage

```
git clone https://github.com/OP3R4T0R/CVE-2022-29806
cd CVE-2022-29806
python3 exploit.py
```

```
python3 exploit.py -t <target_url> -ip <attacker_ip> -p <port>
python3 exploit.py -t <target_url> -ip <attacker-ip> -p <port>
```

#### Requirements

```
pip3 install beautifulsoup4
pip3 install argparse
pip3 install requests
```

### Credits
[krastanoel](https://krastanoel.com/) discovered the vulnerability.
文件快照

 [4.0K]  /data/pocs/02b77aa077ce51af74b4f298fa023115956a0f62
├── [6.8K]  exploit.py
├── [103K]  image.png
└── [ 930]  README.md

0 directories, 3 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。