Cross site scripting

Cross-site scripting XSS vulnerability in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WPHD, GXV3500, and possibly other camera models before firmware 1.0.4.44, allows remote attackers to inject arbitrary web script or HTML via the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WPHD, GXV3500, and possibly other camera models allows remote attackers to hijack the authentication of unspecified...

CVE-2013-3962

The CVE-2013-3962 issue affects Grandstream GXV-series devices (e.g., GXV3501/3504/3601/3601HD/LL/3611HD/LL/3615W/P/3651FHD/3662HD/3615WP_HD/3500, and possibly others) where an XSS vulnerability exists in the web interface via PATH_INFO. The root cause is untrusted input in the web path allowing ...

CVE-2013-3963

CVE-2013-3963 describes a CSRF vulnerability in Grandstream goform/usermanage affecting GXV3501/3504/3601/3601HD/LL/3611HD/LL/3615W/P/3651FHD/3662HD/3615WP_HD/3500 (and potentially other camera models) that lets remote attackers hijack a victim’s session to add users. Root cause is CSRF in the us...

CVE-2013-3962

Cross-site scripting XSS vulnerability in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WPHD, GXV3500, and possibly other camera models before firmware 1.0.4.44, allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2013-3963

Cross-site request forgery CSRF vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WPHD, GXV3500, and possibly other camera models allows remote attackers to hijack the authentication of unspecified...

Grandstream Backdoor / Cross Site Request Forgery / Cross Site Scripting

=============================================================================== GRANDSTREAM ==================================================================== =============================================================================== 1.Advisory Information Title: Grandstream Series...

Grandstream Multiple IP Cameras - Cross-Site Request Forgery

Grandstream Multiple IP Cameras - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/60532/info Grandstream multiple IP cameras including GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WPHD, and GXV3500 are prone to a cross-site...

Grandstream Multiple IP Cameras - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/60532/info Grandstream multiple IP cameras including GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WPHD, and GXV3500 are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allo...

Grandstream Devices Backdoor Credentials (Telnet)

The remote Grandstream device has the default telnet user and password SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Grandstream GXP IP Phone Detection (HTTP)

HTTP based detection of Grandstream GXP IP phones. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Grandstream GXP1405 Executive IP Phone 1.0.1.110 XSS

-------------------------------------------------------------------------------- title: Grandstream GXP1405 Executive IP Phone Persistent XSS product: Grandstream Networks vulnerable version: 1.0.1.110 impact: Low homepage: www.grandstream.com found: 23.10.2012 by: aulmn...

Buffer overflow

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

CVE-2007-5788

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

Design/Logic Flaw

The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a flood of fragmented packets to port 5060...

CVE-2007-5789

The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a flood of fragmented packets to port 5060...

CVE-2007-5789

The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a flood of fragmented packets to port 5060...

CVE-2007-5788

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

CVE-2007-5789

The CVE-2007-5789 entry describes the Grandstream HT-488 0.1 as vulnerable to a denial-of-service via a flood of fragmented packets sent to UDP/TCP port 5060. The underlying fault is not elaborated in the provided materials beyond the consumer-facing impact (device crash) and remote exploitabilit...

CVE-2007-5788

CVE-2007-5788 affects Grandstream HT-488 (firmware 0.1) with a buffer overflow in the SIP parser. A crafted SIP INVITE message can cause a remote denial of service (device crash). Connected records confirm the same vulnerability across multiple sources, but do not provide additional technical det...