14 matches found
EUVD-2008-2072
Malware in sbrugna...
EUVD-2002-1853
Malware in sbrugna...
EUVD-2007-1420
Malware in sbrugna...
Cross site scripting
Cross-site scripting XSS vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter...
CVE-2008-2075
Cross-site scripting XSS vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter...
CVE-2008-2075
CVE-2008-2075 is a cross-site scripting (XSS) vulnerability in AstroCam’s pic.php, affecting versions 2.5.0 through 2.7.3. The issue allows an attacker to inject arbitrary web script or HTML via the picfile parameter. The CVSS data (AV:N/AC:M/Au:N/C:N/I:P/A:N) indicates network access, low attack...
XSS in AstroCam
XSS in AstroCam 2.5.x/2.6.x/2.7.123 ------------------------------------- Software: AstroCam Vulnerable: 2.5.0-2.7.3 Not vulnerable: 2.7.4 Class: Input Validation Error Remote: Yes Local: Yes Credit: This issue was announced by the vendor. Anouncement:...
AstroCam DoS
No description provided...
CVE-2007-1426
The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service daemon shutdown via requests that contain a large amount of data in the "a" variable, which "fills up the message queue."...
Code injection
The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service daemon shutdown via requests that contain a large amount of data in the "a" variable, which "fills up the message queue."...
CVE-2007-1426
The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service daemon shutdown via requests that contain a large amount of data in the "a" variable, which "fills up the message queue."...
CVE-2007-1426
CVE-2007-1426 affects AstroCam 2.0.0 through 2.6.5. The web interface can be exploited remotely to cause a denial of service (daemon shutdown) by sending requests with a large amount of data in the "+a+" parameter, which fills up the message queue. The available connected documents corroborate th...
CVE-2002-1874
CVE-2002-1874 affects AstroCam 0.9-1-1 through 1.4.0 (astrocam.cgi). The vulnerability allows remote attackers to execute arbitrary commands by injecting shell metacharacters in an HTTP request, indicating a command-injection risk in the CGI handler. The description notes vendor clarification tha...
CVE-2002-1874
astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect...