CVE-2013-5215

CVE-2013-5215 is an XSS vulnerability in the web UI of FOSCAM Wireless IP Cameras, specifically the  WiFi scan option. The issue allows remote attackers to inject arbitrary web script or HTML via the SSID field. The public data notes a base CVSS2 score of 4.3 (Medium) with Network attack vector ...

CVE-2013-5215

Cross-site scripting XSS vulnerability in the web interface "WiFi scan" option in FOSCAM Wireless IP Cameras allows remote attackers to inject arbitrary web script or HTML via the SSID...

FOSCAM Wireless IP Camera Cross Site Scripting

Advisory: FOSCAM Wireless IP Camera - SSID XSS Author: Liad Mizrachi Vendor URL: http://www.foscam.com/ Vulnerability Status: No Fix CVE-ID: CVE-2013-5215 ========================== Vulnerability Description ========================== FOSCAM's Web UI "WiFi scan" option is vulnerable to XSS using ...

CORE-2013-0613 - FOSCAM IP-Cameras Improper Access Restrictions

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ FOSCAM IP-Cameras Improper Access Restrictions 1. Advisory Information Title: FOSCAM IP-Cameras Improper Access Restrictions Advisory ID: CORE-2013-0613 Advisory URL:...

Foscam cameras security vulnerabilities

Directory traversal, CSRF...

FOSCAM IP-Cameras Improper Access Restrictions

Due to improper access restrictions, the FOSCAM FI8620 device allows a remote attacker the ability to browse and access arbitrary files from the directories '/tmpfs/' and '/log/' without requiring authentication. This could allow disclosure of access credentials and more. FOSCAM IP-Cameras Improp...

FOSCAM IP-Cameras - Improper Access Restrictions

FOSCAM IP-Cameras - Improper Access Restrictions Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ FOSCAM IP-Cameras Improper Access Restrictions 1. Advisory Information Title: FOSCAM IP-Cameras Improper Access Restrictions Advisory ID: CORE-2013-0613 Advisory URL:...

FOSCAM IP-Cameras - Improper Access Restrictions

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ FOSCAM IP-Cameras Improper Access Restrictions 1. Advisory Information Title: FOSCAM IP-Cameras Improper Access Restrictions Advisory ID: CORE-2013-0613 Advisory URL:...

FOSCAM IP-Cameras Improper Access Restrictions

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ FOSCAM IP-Cameras Improper Access Restrictions 1. Advisory Information Title: FOSCAM IP-Cameras Improper Access Restrictions Advisory ID: CORE-2013-0613 Advisory URL:...

FOSCAM IP-Cameras Improper Access Restrictions

Advisory ID Internal CORE-2013-0613 1. Advisory Information Title: FOSCAM IP-Cameras Improper Access Restrictions Advisory ID: CORE-2013-0613 Advisory URL:http://www.coresecurity.com/advisories/foscam-ip-cameras-improper-access-restrictions Date published: 2013-07-23 Date of last update:...

[CVE-REQUEST] Multiple CSRF vulnerabilities on Foscam IP cameras web UI

Embedded Web interface version 2.4.10.3 and older of Foscam FI8910W, FI8908W and many others is vulnerable to CSRF attacks. This allows attacker to perform calls to any CGI API using cached basic server authentication data stored in victims browser. Details: For example, the following URL request...

Foscam IP (Multiple Cameras) - Multiple Cross-Site Request Forgery Vulnerabilities

Foscam IP Multiple Cameras - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/58943/info Multiple Foscam IP Cameras are prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain...

Foscam Cross Site Request Forgery

Embedded Web interface version 2.4.10.3 and older of Foscam FI8910W, FI8908W and many others is vulnerable to CSRF attacks. This allows attacker to perform calls to any CGI API using cached basic server authentication data stored in victims browser. Details: For example, the following URL request...

Foscam IP (Multiple Cameras) - Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/58943/info Multiple Foscam IP Cameras are prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks. The following products a...

Foscam Detection

The remote host is a Foscam IP Camera with an embedded web server. Note that Foscam cameras can be re-branded and re-sold by other vendors. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65669; scriptversion"1.7"; scriptcvsdate"Date: 2020/01/22";...

Foscam 11.37.2.x < 11.37.2.49 Directory Traversal

The version of the Foscam IP Camera firmware 11.37.2.x 11.37.2.49 on the remote host has a directory traversal vulnerability. A remote attacker could exploit this to access the entire filesystem and wifi credentials, for example, with a specially crafted request to retrieve the host's /proc/kcore...

CVE-2013-2560

Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by discovering 1 web credentials or 2 Wi-Fi credentials...

Directory traversal

Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by discovering 1 web credentials or 2 Wi-Fi credentials...

CVE-2013-2560

CVE-2013-2560 affects Foscam IP camera firmware before 11.37.2.49. The issue is a directory traversal in the web interface that allows remote attackers to read arbitrary files by using a .. in the URI, potentially exposing web and Wi‑Fi credentials (and possibly the full filesystem). Exploitation...

CVE-2013-2560

Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by discovering 1 web credentials or 2 Wi-Fi credentials...