EUVD-2017-7304

Malware in sbrugna...

CVE-2017-15885: Improper Neutralization of Input During Web Page Generation

Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the confLayoutOwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214...