ZoneMinder index.php SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/adysec/POC/blob/main/wpoc/ZoneMinder/ZoneMinder%E7%B3%BB%E7%BB%9Fsort%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://ddpoc.com/DVB-2025-8756.html
• https://github.com/Sec-Fork/POC-20250106/blob/main/ZoneMinder/ZoneMinder%E7%B3%BB%E7%BB%9Fsort%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://qkl.seebug.org/vuldb/ssvid-99894
• https://avd.aliyun.com/detail?id=AVD-2024-51482
• https://www.codeant.ai/vulnerability-database/cve-2026-27470
• https://nvd.nist.gov/vuln/detail/CVE-2024-51482
• https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-qm8h-3xvf-m7j3
• https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-9cmr-7437-v9fj
• https://github.com/kocaemre/CVE-2026-27470
• https://security.snyk.io/vuln/SNYK-DEBIAN12-ZONEMINDER-3335967
• https://vuldb.com/vuln/274219
• https://pentest-tools.com/vulnerabilities-exploits/zoneminder-sql-injection_23697
• https://www.exploit-db.com/exploits/41239
• https://www.incibe.es/index.php/en/incibe-cert/early-warning/vulnerabilities/cve-2024-43360

Related Vulnerabilities

• 电子证据管理系统-index.php存在SQL注入
• JoomShaper SP LMS /index.php?option=com_splms&view=cart 文件上传漏洞（CVE-2026-48909）
• PoCzoneminder-system-log: ZoneMinder System Log - Detect
• NukeViet /index.php 服务器端请求伪造漏洞（CVE-2026-55372）
• ZLMediaKit /index/ 未授权访问漏洞（CVE-2024-27488）
• WordPress Time Capsule /wp-tcapsule-bridge/upload/php/index.php 文件上传漏洞（CVE-2024-8856）
• OpenCATS /index.php 默认口令漏洞
• Joomla JCE /index.php com_jce 文件上传漏洞（CVE-2026-48907）
• 深信服DC数据中心管理系统 /src/sangforindex XML 外部实体注入漏洞
• 时空智友企业流程化管控系统 /formservice indexService.notice SQL 注入漏洞
• TPshop /index.php 默认口令漏洞
• WIFISKY 7层流控路由器 /portal/ibilling/index.php 命令执行漏洞
• XYHCMS /index.php?s=Api/lt/gbooklist SQL 注入漏洞