CVE-2007-5213

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

CVE-2007-5214

The CVE describes multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier. The issues allow remote attackers to inject arbitrary web script or HTML via (1) PATH_INFO to the default URI (e.g., root or view/), (2) settings parameters s...

CVE-2007-5214: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to the default URI associated with a directory, as demonstrated by a the root directory and b the...

CVE-2007-5213: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

CVE-2007-5212: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via 1 parameters associated with saved settings, as demonstrated by the confSMTPMailServer1 parameter to ServerManager.srv...

Owning Big Brother: How to Crack into Axis IP cameras

The research is made of two components: a purple paper and a video. The research doesn't just cover boring PoCs, but actual Hollywood-style exploits :- . Yes, this includes the classic attack in which the legitimate video stream gets replaced by another stream that keeps looping forever! In the...

Axis IP cameras crossite scripting

It's possible to spoof video content by using crossite scripting attacks...

IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================= IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit ======================================================= / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary web script or HTML via the camNo parameter to incl/imageincl.shtml, and other unspecified vectors...

Design/Logic Flaw

axis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a denial of service reboot via many requests with unique buffer names in the buffername parameter in a start action...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via 1 axis-cgi/admin/restart.cgi, 2 the user and sgrp parameters to axis-cgi/admin/pwdgrp.cgi in an add action, or 3 the server parameter to...

CVE-2007-4926

The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive information by sniffing the wireless network or by leveraging unspecified other vectors...

CVE-2007-4930

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via 1 axis-cgi/admin/restart.cgi, 2 the user and sgrp parameters to axis-cgi/admin/pwdgrp.cgi in an add action, or 3 the server parameter to...

Design/Logic Flaw

The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive information...

CVE-2007-4928

The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive information...

CVE-2007-4929

Multiple cross-site scripting XSS vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary web script or HTML via the camNo parameter to incl/imageincl.shtml, and other unspecified vectors...

CVE-2007-4927

axis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a denial of service reboot via many requests with unique buffer names in the buffername parameter in a start action...

CVE-2007-4929

Multiple cross-site scripting XSS vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary web script or HTML via the camNo parameter to incl/imageincl.shtml, and other unspecified vectors...

CVE-2007-4926

The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive information by sniffing the wireless network or by leveraging unspecified other vectors...

CVE-2007-4926

The CVE-2007-4926 entry concerns the AXIS 207W camera. The affected component is the authentication mechanism that uses a base64-encoded cleartext username and password, enabling an attacker to obtain credentials by eavesdropping on wireless traffic or via other unspecified vectors. Practical imp...