CVE-2008-6295

CVE-2008-6295 concerns multiple XSS vulnerabilities in Camera Life 2.6.2b8. The affected software exposes several input vectors that allow injection of arbitrary script/HTML via query strings and URL params: (1) q parameter to search.php and rss.php; (2) the query string after the image name to p...

CVE-2008-6295: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.php and 2 rss.php; the query string after the image name in 3 photos/photo; the path parameter to 4 folder.php; page parameter and...

Fedora Update for zoneminder FEDORA-2008-3462

Check for the Version of zoneminder OpenVAS Vulnerability Test Fedora Update for zoneminder FEDORA-2008-3462 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Nokia N95-8 (JPG File) Remote Crash PoC

Exploit for hardware platform in category dos / poc ======================================= Nokia N95-8 JPG File Remote Crash PoC ======================================= Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3...

CVE-2008-6086

SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355...

Cross site scripting

Cross-site scripting XSS vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Sql injection

SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355...

CVE-2008-6087

Cross-site scripting XSS vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2008-6087

Cross-site scripting XSS vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2008-6086

SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355...

CVE-2008-6086

The CVE-2008-6086 entry describes an SQL injection vulnerability in Camera Life 2.6.2b4, exposed via album.php. The vulnerability allows remote attackers to execute arbitrary SQL commands by manipulating the id parameter, representing a different vector from CVE-2008-3355. According to the NVD en...

CVE-2008-6087

CVE-2008-6087 describes a cross-site scripting (XSS) vulnerability in the Camera Life application, specifically in topic.php of version 2.6.2b4, exploitable via the name parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The provided connected documents c...

CVE-2008-6086: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355...

CVE-2008-6087: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Update Protection against AXIS Communications Camera Control image_pan_tilt Buffer Overflow

A buffer overflow vulnerability was reported in the ActiveX Camera Control by AXIS Communications. A remote image/video monitoring solution, AXIS Camera Control is an ActiveX control with multiple functions that can be used over HTTP. The vulnerability is due to a boundary error that can be...

AXIS Camera控件image_pan_tilt属性缓冲区溢出漏洞

AXIS Camera Control是一种可以在IE中观看网络流媒体的控件程序。 AXIS Camera Control的实现上存在缓冲溢出漏洞，远程恶意网站可能利用此漏洞控制用户客户端系统。 控件在处理超长的imagepantilt属性数据时存在堆溢出问题，远程恶意网站可以通过设置超长的数据触发溢出控制客户端系统。 Axis Communications Camera Control = 2.40.0.0 厂商补丁： Axis Communications ------------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Heap overflow

Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers to execute arbitrary code via a long imagepantilt property value...

KLA10051 ACE vulnerability in Axis Camera Control

A buffer overflow vulnerability was found in Axis Camera Control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to AxisCamControl.ocx via a specially designed imagepantilt property value. Origin...

CVE-2008-5260: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers to execute arbitrary code via a long imagepantilt property value...

Secunia Research: AXIS Camera Control "image_pan_tilt" Property Buffer Overflow

====================================================================== Secunia Research 23/01/2009 - AXIS Camera Control "imagepantilt" Property Buffer Overflow - ====================================================================== Table of Contents Affected...