Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2026-27470 PoC — ZoneMinder SQL注入漏洞

Source
Associated Vulnerability
Title:ZoneMinder SQL注入漏洞 (CVE-2026-27470)
Description:ZoneMinder是ZoneMinder开源的一套开源的视频监控软件系统。该系统支持IP、USB和模拟摄像机等。 ZoneMinder 1.36.37及之前版本和1.37.61版本至1.38.0版本存在SQL注入漏洞,该漏洞源于web/ajax/status.php文件中getNearEvents函数存在二阶SQL注入,可能导致执行任意SQL查询。
Description
ZoneMinder Second-Order SQL Injection PoC — CVE-2026-27470
File Snapshot

None
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.