medium6.1Public exploit code
CVE-2026-51133
Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size para…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- C-MOR 6.0104 - Cross-Site Scripting (XSS)2026-08-31 · webapps · hardware
Impact
Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component
Affected products
| Product | Affected versions |
|---|---|
| Za-Internet GmbH C-MOR Video Surveillance | through 6.0104 |
Versions were read from the advisory text. No structured product data has been published for this record yet.