WebcamXP 3.72.4404.05.280 Beta - show_gallery_pic?id Arbitrary Memory Disclosure

WebcamXP 3.72.4404.05.280 Beta - showgallerypic?id Arbitrary Memory Disclosure source: https://www.securityfocus.com/bid/27875/info webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data. Attackers can exploit...

WebcamXP 3.72.4404.05.280 Beta - pocketpc?camnum Arbitrary Memory Disclosure

WebcamXP 3.72.4404.05.280 Beta - pocketpc?camnum Arbitrary Memory Disclosure source: https://www.securityfocus.com/bid/27875/info webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data. Attackers can exploit...

WebcamXP 3.72.440/4.05.280 Beta - '/show_gallery_pic?id' Arbitrary Memory Disclosure

source: https://www.securityfocus.com/bid/27875/info webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data. Attackers can exploit these issues to access potentially sensitive information or crash the...

WebcamXP 3.72.440/4.05.280 Beta - '/pocketpc?camnum' Arbitrary Memory Disclosure

source: https://www.securityfocus.com/bid/27875/info webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data. Attackers can exploit these issues to access potentially sensitive information or crash the...

CVE-2003-1479

CVE-2003-1479 is a documented cross-site scripting (XSS) vulnerability affecting webcamXP versions 1.02.432 and 1.02.535. The issue allows remote attackers to inject arbitrary web script or HTML through the message field. The NVD entry lists a CVSS v2 base score of 4.3 (MEDIUM) with network attac...

CVE-2003-1479

Cross-site scripting XSS vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field...

CVE-2003-1479: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field...

CVE-2004-2094

WebcamXP 1.06.945 is affected by a cross-site scripting (XSS) vulnerability. A remote attacker can inject arbitrary HTML or web script as other users through a URL that contains the script. The description does not provide concrete details on root cause beyond the XSS flaw, nor explicit remediati...

CVE-2004-2094

Cross-site scripting XSS vulnerability in WebcamXP 1.06.945 allows remote attackers to inject arbitrary HTML or web script as other users via a URL that contains the script...

CVE-2004-2094: Undefined Security Weakness

Cross-site scripting XSS vulnerability in WebcamXP 1.06.945 allows remote attackers to inject arbitrary HTML or web script as other users via a URL that contains the script...

CVE-2005-1190

WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which takes up too much display space and prevents the chat frame from being properly rendered...

CVE-2005-1189

Cross-site scripting XSS vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitrary web script or HTML via the chat name, as demonstrated by using an IFRAME to redirect users to other sites...

WebcamXP Chat Name XSS

The remote host is running a version of webcamXP, a webcam software package and integrated web server for Windows, that suffers from an HTML injection flaw in its chat feature. An attacker can exploit this flaw by injecting malicious HTML and script code through the nickname field to redirect cha...

CVE-2005-1189

CVE-2005-1189 affects WebcamXP PRO (version 2.16.468 and earlier). The vulnerability is a cross-site scripting (XSS) flaw in the chat feature that allows remote attackers to inject arbitrary HTML/script via the chat name, demonstrated by using an IFRAME to redirect users to other sites. The NVD r...

CVE-2005-1190

CVE-2005-1190 affects WebcamXP PRO prior to or including v2.16.468, where a remote attacker can trigger a denial of service by supplying a very long chat name. This causes excessive display space usage and prevents the chat frame from rendering correctly. The description consistently indicates a ...

CVE-2005-1189

Cross-site scripting XSS vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitrary web script or HTML via the chat name, as demonstrated by using an IFRAME to redirect users to other sites...

CVE-2005-1190

WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which takes up too much display space and prevents the chat frame from being properly rendered...

webcamXP Camera Detection

Binary data 2841.prm...

webcamXP < 2.16.478 Chat Name HTML Injection

Binary data 2842.prm...

[Full-disclosure] WebcamXP

------------------------------------------------------------ - EXPL-A-2005-005 exploitlabs.com Advisory 034 - ------------------------------------------------------------ - WebcamXP - OVERVIEW ======== webcamXP is one of the most popular webcam software for private and professional use. it offers...