Camera Life 2.6.2b4 - SQL Injection Cross-Site Scripting

Camera Life 2.6.2b4 - SQL Injection Cross-Site Scripting Cameralife 2.6.2b4 SQL/XSS Multiple Remote Vulnerabilities Script:Cameralife 2.6.2b4 Download:http://nchc.dl.sourceforge.net/sourceforge/fdcl/cameralife-2.6.2b4.zip Author:BackDoor Bug 1;album.php Remote SQL Injection Vulnerability...

CVE-2008-4366

CVE-2008-4366 is an unrestricted file upload in the image upload component of Camera Life 2.6.2b4. According to the connected documents, remote authenticated users can upload a file with an executable extension and then access it via a direct URL under images/photos/upload, potentially executing ...

CVE-2008-4366: Improper Input Validation

Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a user directory under images/photos/uplo...

Camera Life 2.6.2b4 Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================= Camera Life 2.6.2b4 Arbitrary File Upload Vulnerability ======================================================= + CameraLife-2.6.2b4 Arbitrary File Upload Vulnerability +...

Siemens Gigaset WLAN Camera不安全默认密码漏洞

BUGTRAQ ID: 30973 CNCAN ID：CNCAN-2008090308 Siemens Gigaset WLAN Camera是一款基于LAN和WLAN的摄像头设备。 Siemens Gigaset WLAN Camera存在不安全默认密码，远程攻击者可以利用此密码未授权访问应用程序 Siemens Gigaset WLAN Camera 1.27 目前没有解决方案提供：...

Cross site scripting

Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3482

Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3482

Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3482

CVE-2008-3482 is a cross-site scripting (XSS) vulnerability in the error page feature of Panasonic Network Cameras (BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, BB-HCM515). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3482: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

CVE-2008-3355

SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

CVE-2008-3355

CVE-2008-3355 : SQL injection in sitemap.xml.php of Camera Life 2.6.2 (and related builds) allows remote attackers to execute arbitrary SQL via the id parameter in a photos action. Public references (e.g., Exploit-DB) indicate available exploit information. The affected version is listed as Camer...

CVE-2008-3355

SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

CVE-2008-3355: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

Camera Life 'sitemap.xml.php' SQL注入漏洞

BUGTRAQ ID: 30369 CNCAN ID：CNCAN-2008072802 Camera Life是一款基于PHP的WEB应用程序。 Camera Life不正确过滤用户提交的WEB数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'sitemap.xml.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或数据库 Camera Life Camera Life 2.6.2 目前没有解决方案提供： http://fdcl.sourceforge.net/...

Camera Life 2.6.2 (id) Remote SQL Injection Vulnerability

No description provided by source. Camera Life 2.6.2id Sql Injection Vulnerability Author: nuclear script: http://downloads.sourceforge.net/fdcl/cameralife-2.6.2aa.zip exploit: sitemap.xml.php?page=photos&id=999999 union select concatusername,0x3a,password,null from users -- greetz cAs, Mi4night,...

cameralife-sql.txt

Camera Life 2.6.2id Sql Injection Vulnerability Author: nuclear script: http://downloads.sourceforge.net/fdcl/cameralife-2.6.2aa.zip exploit: sitemap.xml.php?page=photos&id=999999 union select concatusername,0x3a,password,null from users -- greetz cAs, Mi4night, zYzTeM ,THEMAN, DiGitalX, sys32r,...

Camera Life 2.6.2 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Camera Life 2.6.2 id Remote SQL Injection Vulnerability ========================================================= Camera Life 2.6.2id Sql Injection Vulnerability Author: nuclear...

Camera Life 2.6.2 - id SQL Injection

Camera Life 2.6.2 - id SQL Injection Camera Life 2.6.2id Sql Injection Vulnerability Author: nuclear script: http://downloads.sourceforge.net/fdcl/cameralife-2.6.2aa.zip exploit: sitemap.xml.php?page=photos&id=999999 union select concatusername,0x3a,password,null from users -- greetz cAs, Mi4nigh...