7 matches found
CVE-2018-7828
A Cross-Site Request Forgery CSRF vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera...
CVE-2018-7827
A Cross-Site Scripting XSS vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session...
Design/Logic Flaw
An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands...
CVE-2018-7827
CVE-2018-7827 is a publicly documented Cross-Site Scripting (XSS) vulnerability in Schneider Electric 1st Gen Pelco Sarix Enhanced Cameras and Spectra Enhanced PTZ Cameras. Multiple connected sources (NVD, Red Hat, CNVD, CVE listing) describe an XSS that allows a remote attacker to cause arbitrar...
CVE-2018-7829: Improper Neutralization of Special Elements in Data Query Logic
An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands...
CVE-2018-7828: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera...
CVE-2018-7827: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session...