CVE-2018-7828

A Cross-Site Request Forgery CSRF vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera...

CVE-2018-7827

A Cross-Site Scripting XSS vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session...

Design/Logic Flaw

An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands...

CVE-2018-7827

CVE-2018-7827 is a publicly documented Cross-Site Scripting (XSS) vulnerability in Schneider Electric 1st Gen Pelco Sarix Enhanced Cameras and Spectra Enhanced PTZ Cameras. Multiple connected sources (NVD, Red Hat, CNVD, CVE listing) describe an XSS that allows a remote attacker to cause arbitrar...

CVE-2018-7827: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session...

CVE-2018-7829: Improper Neutralization of Special Elements in Data Query Logic

An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands...

CVE-2018-7828: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera...

PT-2019-1490

Name of the Vulnerable Software and Affected Versions Pelco Sarix Enhanced Camera affected versions not specified Spectra Enhanced PTZ Camera affected versions not specified Description The issue is related to an improper neutralization of special elements in query, which allows an attacker to...

PT-2019-1488

Name of the Vulnerable Software and Affected Versions Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera affected versions not specified Description A Cross-Site Scripting XSS issue exists, allowing a remote attacker to execute arbitrary HTML and script code in a user's browser session...

PT-2019-1489

Name of the Vulnerable Software and Affected Versions Pelco Sarix Enhanced Camera affected versions not specified Spectra Enhanced PTZ Camera affected versions not specified Description A Cross-Site Request Forgery CSRF issue exists, related to insufficient authentication checks for executed...