Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-0232.
PoCs published by Metasploit, bcoles, including Metasploit module exploits/unix/webapp/zoneminder_packagecontrol_exec.
AI-analyzed exploit summary This Metasploit module exploits a command execution vulnerability in ZoneMinder Video Server versions 1.24.0 to 1.25.0 by injecting arbitrary commands via the 'runState' parameter in the 'packageControl' function.
Description
includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command parameter in the setDeviceStatusX10 function.
Exploits (2)
This Metasploit module exploits a command execution vulnerability in ZoneMinder Video Server versions 1.24.0 to 1.25.0 by injecting arbitrary commands via the 'runState' parameter in the 'packageControl' function.
This Metasploit module exploits a command execution vulnerability in ZoneMinder Video Server versions 1.24.0 to 1.25.0 by leveraging the 'packageControl' function, which passes user-controlled input from the 'runState' parameter to the 'exec()' function.