https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-45179.htmlhttps://patchthecve.com/cve/CVE-2024-45179.htmlWed, 17 Jun 2026 07:53:44 +0000HIGH 7.2: An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to insufficient input validation, the C-MOR web interface is vulnerable to OS command injection attacks. It was found out that different functionality is vulnerable to OS command injection attacks, for example fhttps://patchthecve.com/cve/CVE-2024-45176.htmlhttps://patchthecve.com/cve/CVE-2024-45176.htmlWed, 17 Jun 2026 07:53:43 +0000MEDIUM 6.1: An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper input validation, the C-MOR web interface is vulnerable to reflected cross-site scripting (XSS) attacks. It was found out that different functions are prone to reflected cross-site scripting attacks due to insuffhttps://patchthecve.com/cve/CVE-2024-45175.htmlhttps://patchthecve.com/cve/CVE-2024-45175.htmlWed, 17 Jun 2026 07:53:43 +0000HIGH 8.8: An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Sensitive information is stored in cleartext. It was found out that sensitive information, for example login credentials of cameras, is stored in cleartext. Thus, an attacker with filesystem access, for example exploiting a pathhttps://patchthecve.com/cve/CVE-2024-45171.htmlhttps://patchthecve.com/cve/CVE-2024-45171.htmlWed, 17 Jun 2026 07:53:43 +0000HIGH 8.8: An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to upload dangerous files, for instance PHP code, to the C-MOR system. By analyzing the C-MOR web interface, it was found out that the upload functionality for backup files ahttps://patchthecve.com/cve/CVE-2024-45178.htmlhttps://patchthecve.com/cve/CVE-2024-45178.htmlWed, 17 Jun 2026 07:53:44 +0000HIGH 7.1: An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to download arbitrary files from the C-MOR system via a path traversal attack. It was found out that different functionalities are vulnerable to path traversal attacks, due thttps://patchthecve.com/cve/CVE-2024-45173.htmlhttps://patchthecve.com/cve/CVE-2024-45173.htmlWed, 17 Jun 2026 07:53:43 +0000HIGH 8.8: An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper privilege management concerning sudo privileges, C-MOR is vulnerable to a privilege escalation attack. The Linux user www-data running the C-MOR web interface can execute some OS commands as root via Sudo withouthttps://patchthecve.com/cve/CVE-2024-45172.htmlhttps://patchthecve.com/cve/CVE-2024-45172.htmlWed, 17 Jun 2026 07:53:43 +0000MEDIUM 6.8: An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to missing protection mechanisms, the C-MOR web interface is vulnerable to cross-site request forgery (CSRF) attacks. The C-MOR web interface offers no protection against cross-site request forgery (CSRF) attackhttps://patchthecve.com/cve/CVE-2024-45177.htmlhttps://patchthecve.com/cve/CVE-2024-45177.htmlWed, 17 Jun 2026 07:53:43 +0000MEDIUM 5.4: An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper input validation, the C-MOR web interface is vulnerable to persistent cross-site scripting (XSS) attacks. It was found out that the camera configuration is vulnerable to a persistent cross-site scriphttps://patchthecve.com/cve/CVE-2024-45174.htmlhttps://patchthecve.com/cve/CVE-2024-45174.htmlWed, 17 Jun 2026 07:53:43 +0000HIGH 8.1: An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper validation of user-supplied data, different functionalities of the C-MOR web interface are vulnerable to SQL injection attacks. This kind of attack allows an authenticated user to execute arbitrary Shttps://patchthecve.com/cve/CVE-2024-45170.htmlhttps://patchthecve.com/cve/CVE-2024-45170.htmlWed, 17 Jun 2026 07:53:42 +0000HIGH 8.1: An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or missing access control, low privileged users can use administrative functions of the C-MOR web interface. It was found out that different functions are only available to administrative users. However, access t