This Metasploit module exploits an unauthenticated command injection in zoneminder that can be exploited by appending a command to an action of the snapshot view. Versions prior to 1.36.33 and 1.37.33 are affected.
72e4ca06ed5895434040ce5f7892f235a54ef92b96463ab0beedf4546634909f