CVE-2022-29806

This is a functional exploit for CVE-2022-29806, targeting a path traversal vulnerability in ZoneMinder up to 1.36.12. It achieves RCE by manipulating debug log file paths and default language options to write and execute arbitrary PHP code.

This Metasploit module exploits a chained vulnerability in ZoneMinder (CVE-2022-29806) involving arbitrary file write via debug log manipulation and path traversal in language settings to achieve remote code execution. It authenticates, leaks the installation path, writes a PHP payload to a traversed path, and triggers execution by modifying language settings.