{"uuid": "0cf6817b-839c-4fdb-97e3-ea6bc48eba50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0232", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminder_packagecontrol_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command execution vulnerability in ZoneMinder Video\\n          Server version 1.24.0 to 1.25.0 which could be abused to allow\\n          authenticated users to execute arbitrary commands under the context of the\\n          web server user. The 'packageControl' function in the\\n          'includes/actions.php' file calls 'exec()' with user controlled data\\n          from the 'runState' parameter.\", \"disclosure_date\": \"2013-01-22\", \"fullname\": \"exploit/unix/webapp/zoneminder_packagecontrol_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"ZoneMinder Video Server packageControl Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/zoneminder_packagecontrol_exec.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"unix/webapp/zoneminder_packagecontrol_exec\", \"references\": [\"CVE-2013-0232\", \"OSVDB-89529\", \"EDB-24310\", \"URL-http://web.archive.org/web/20211207213730/https://itsecuritysolutions.org/2013-01-22-ZoneMinder-Video-Server-arbitrary-command-execution-vulnerability/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:52.990821Z"}