ZoneMinder

ZoneMinder is an open-source video surveillance platform for Linux that supports various camera types and provides web-based monitoring and recording. Its exposed web interface and reliance on backend services make it a common target for exploitation, especially when misconfigured or running vulnerable versions.

v1.29 & v1.30

ZoneMinder 1.29/1.30 is vulnerable to blind SQLi in the limit parameter of the index.php page, which accepts POST requests. This flaw allows stacked queries on MySQL versions greater than 5.0.11, enabling attackers to execute arbitrary SQL commands, including time-based delays (PoC).

PoC

&limit=100;(SELECT * FROM (SELECT(SLEEP(5)))OQkj)#&minTime=1466674406.084434

Webshell