CVE-2007-5212

Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via (1) parameters associated with saved settings, as demonstrated by the conf_SMTP_MailServer1 parameter to ServerManager.srv; or (2) the subpage parameter to wizard/first/wizard_main_first.shtml. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.

BUGTRAQ: http://www.securityfocus.com/archive/1/archive/1/480995/100/0/threaded
MISC: http://www.procheckup.com/Vulnerability_Axis_2100_research.pdf
BID: http://www.securityfocus.com/bid/25837
OSVDB: http://osvdb.org/38795
OSVDB: http://osvdb.org/38796
SREASON: http://securityreason.com/securityalert/3188
CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5212

10 years
251 countries
633k users
3462k calculations
Logo www.kelcom.cz
Logo www.a1securitycameras.com
Logo www.inv-technology.com
Logo ru.kedacom.com
Logo www.power-shop.gr
Logo sectech.co.nz