CVE-2026-27470

This repository contains a functional proof-of-concept exploit for CVE-2026-27470, a second-order SQL injection vulnerability in ZoneMinder. The exploit demonstrates how an authenticated attacker can extract arbitrary data from the database by leveraging a stored payload in the event name field.

This repository contains a functional proof-of-concept exploit for CVE-2026-27470, a second-order SQL injection vulnerability in ZoneMinder. The exploit demonstrates how an authenticated attacker can extract arbitrary data from the database by leveraging a stored payload in the Events.Name field.

This repository contains a functional exploit PoC for CVE-2026-27470, a second-order SQL injection vulnerability in ZoneMinder's `getNearEvents()` function. The exploit demonstrates how an attacker can store a malicious payload in an event's Name or Cause field and later trigger it via the status API to execute arbitrary SQL queries.