File and Path Handling

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability.CVE-2022-29806Zoneminder · 67% likely

   CWE-22

2. Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) view, (2) request, or…CVE-2013-0332Zoneminder · 10% likely

   CWE-22

3. ZoneMinder contains Local File Inclusion vulnerabilityCVE-2023-26036ZoneMinder · CVSS 8.1 · 0.9% likely

   CWE-426

4. ZoneMinder contains Local File Inclusion vulnerability via `web/ajax/modal.php`CVE-2023-26038ZoneMinder · CVSS 5.4 · 0.5% likely

   CWE-426

5. ZoneMinder 1.37.x Path Traversal via files viewCVE-2024-58386ZoneMinder · CVSS 6.5 · 0.4% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.