CVE-2014-1902

🗓️ 14 May 2015 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 81 Views🌐 WEB

CVE-2014-1902 XSS vulnerabilities in Y-Cam camera model

Reporter	Title	Published	Views	Family All 7
CNVD	Cross-site Scripting Vulnerabilities in Various Y-Cam Products	15 May 201500:00	–	cnvd
Cvelist	CVE-2014-1902	14 May 201500:00	–	cvelist
EUVD	EUVD-2014-1964	7 Oct 202500:30	–	euvd
NVD	CVE-2014-1902	14 May 201500:59	–	nvd
Prion	Cross site scripting	14 May 201500:59	–	prion
Positive Technologies	PT-2015-3694	14 May 201500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2014-1902: Improper Neutralization of Input During Web Page Generation	14 May 201500:00	–	rapid7

NVD

Node

AND

y-cam ycb004_firmwareMatch4.30

Node

AND

y-cam ycb002_firmwareMatch4.30

Node

AND

y-cam yck002_firmwareMatch4.30

Node

AND

y-cam yck003_firmwareMatch4.30

Node

AND

y-cam yceb03_firmwareMatch4.30

Node

AND

y-cam ycb001_firmwareMatch4.30

Node

AND

y-cam ycblhd5_firmwareMatch4.30

Node

AND

y-cam ycblb3_firmwareMatch4.30

Node

AND

y-cam ycb003_firmwareMatch4.30

Node

AND

y-cam ycw003_firmwareMatch4.30

Node

AND

y-cam ycw004_firmwareMatch4.30

Node

AND

y-cam ycbl03_firmwareMatch4.30

Node

AND

y-cam yck004_firmwareMatch4.30

Node

AND

y-cam ycw001_firmwareMatch4.30

Node

AND

y-cam ycw002_firmwareMatch4.30

Source	Link
trustwave	www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-007/
y-cam	www.y-cam.com/y-cam-security-fix/

Parameter	Position	Path	Description	CWE
SYSCONTACT	request body	/en/identity.asp	XSS via the SYSCONTACT parameter in the form/identityApply action.	CWE-79
PASSWD	request body	/en/account/accedit.asp	XSS via the PASSWD parameter in the form/accAdd action.	CWE-79
NTPSERVER	request body	/en/clock.asp	XSS via the NTPSERVER parameter in the form/clockApply action.	CWE-79
SERVER	request body	/en/smtpclient.asp	XSS via the SERVER parameter in the form/smtpclientApply action.	CWE-79
SERVER	request body	/en/ftp.asp	XSS via the SERVER parameter in the form/ftpApply action.	CWE-79
SERVER	request body	/en/httpevent.asp	XSS via the SERVER parameter in the form/httpEventApply action.	CWE-79

17 Jun 2026 00:05Current

5.7Medium risk

Vulners AI Score5.7

CVSS 23.5

EPSS0.00777

cve-2014-1902 cross-site scripting xss y-cam camera firmware 4.30 security vulnerability