Design/Logic Flaw

AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml...

CVE-2017-12413

Axis 2100 Network Camera, version 2.43, is affected by a Cross-Site Scripting (XSS) vulnerability exploitable via the URI. The root cause, as documented across multiple sources, is that the value from the URL path filename is echoed into the HTML response without proper sanitization, enabling a r...

CVE-2017-12413

AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml...

Axis 2100 Network Camera 2.43 Cross Site Scripting

i?+ Title: Axis 2100 Network Camera 2.43 - Reflected XSS + Credits / Discovery: Nassim Asrir + Author Contact: [email protected] + Author Company: Henceforth + CVE: CVE-2017-12413 Vendor: =============== https://www.axis.com/ Vulnerability Type: =================== Reflected Cross Site Scripting...