Design/Logic Flaw

AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml...

CVE-2017-12413

AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml...

CVE-2017-12413

Axis 2100 Network Camera, version 2.43, is affected by a Cross-Site Scripting (XSS) vulnerability exploitable via the URI. The root cause, as documented across multiple sources, is that the value from the URL path filename is echoed into the HTML response without proper sanitization, enabling a r...

Axis 2100 Network Camera 2.43 Cross Site Scripting

i?+ Title: Axis 2100 Network Camera 2.43 - Reflected XSS + Credits / Discovery: Nassim Asrir + Author Contact: [email protected] + Author Company: Henceforth + CVE: CVE-2017-12413 Vendor: =============== https://www.axis.com/ Vulnerability Type: =================== Reflected Cross Site Scripting...

CVE-2017-12413: Improper Neutralization of Input During Web Page Generation

AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml...

PT-2017-12542

Name of the Vulnerable Software and Affected Versions AXIS 2100 devices version 2.43 Description The issue is related to a XSS vulnerability via the URI, possibly related to admin/admin.shtml. Recommendations For version 2.43, update the firmware to a version that addresses this issue, or as a...