Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

CVE-2007-5213

The CVE-2007-5213 entry describes CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier. The affected component is the web management interface, where cross-site requests can perform administrator actions. Demonstrated vectors include (1) changing the SMTP serve...

CVE-2007-5214

Multiple cross-site scripting XSS vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to the default URI associated with a directory, as demonstrated by a the root directory and b the...

CVE-2007-5214

The CVE describes multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier. The issues allow remote attackers to inject arbitrary web script or HTML via (1) PATH_INFO to the default URI (e.g., root or view/), (2) settings parameters s...

CVE-2007-5212

CVE-2007-5212: AXIS 2100 Network Camera 2.02 has multiple XSS vulnerabilities in firmware prior to 2.43. Attackers can inject arbitrary web script/HTML via (1) parameters tied to saved settings (e.g., conf_SMTP_MailServer1 in ServerManager.srv) and (2) the subpage parameter to wizard/first/wizard...

CVE-2007-5213

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

CVE-2007-5212

Multiple cross-site scripting XSS vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via 1 parameters associated with saved settings, as demonstrated by the confSMTPMailServer1 parameter to ServerManager.srv...

Axis Communications 207W Network Camera - Web Interface axis-cgiadminpwdgrp.cgi Multiple Cross-Site Request Forgery Vulnerabilities

Axis Communications 207W Network Camera - Web Interface axis-cgiadminpwdgrp.cgi Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues...

Axis Communications 207W Network Camera - Web Interface adminrestartMessage.shtml?server Cross-Site Request Forgery

Axis Communications 207W Network Camera - Web Interface adminrestartMessage.shtml?server Cross-Site Request Forgery source: https://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a...

Axis Communications 207W Network Camera - Web Interface axis-cgi/admin/restart.cgi Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a cross-site scripting vulnerability, a cross-site request-forgery vulnerability, and a denial-of-service...

Axis Communications 207W Network Camera - Web Interface 'axis-cgi/admin/pwdgrp.cgi' Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a cross-site scripting vulnerability, a cross-site request-forgery vulnerability, and a denial-of-service...

Axis Communications 207W Network Camera - Web Interface '/admin/restartMessage.shtml?server' Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a cross-site scripting vulnerability, a cross-site request-forgery vulnerability, and a denial-of-service...

Axis Communications 207W Network Camera - Web Interface axis-cgiadminrestart.cgi Cross-Site Request Forgery

Axis Communications 207W Network Camera - Web Interface axis-cgiadminrestart.cgi Cross-Site Request Forgery source: https://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a...

CVE-2007-3488

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and...

Heap overflow

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and...

CVE-2007-3488

CVE-2007-3488 is a heap-based buffer overflow in the viewer ActiveX control of Sony Network Cameras. Affected models include SNC-RZ25N (pre-1.30), SNC-P1/P5 (pre-1.29), SNC-CS10/CS11 (pre-1.06), SNC-DF40N/DF70N (pre-1.18), SNC-RZ50N/CS50N (pre-2.22), SNC-DF85N/DF80N/DF50N (pre-1.12), and SNC-RX57...

CVE-2007-3488

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and...

Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC

No description provided by source. !-- Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC Camera info http://bssc.sel.sony.com/BroadcastandBusiness/DisplayModel?id=79540 SNC-P5 External API documentation...

sony-heap.txt

Sub tryMe buff = String15000, "A" viewer.PrmSetNetworkParam buff, 1 End Sub...

Sony Network Camera SNC-P5 1.0 - ActiveX viewer Heap Overflow (PoC)

Sony Network Camera SNC-P5 1.0 - ActiveX viewer Heap Overflow PoC Sub tryMe buff = String15000, "A" viewer.PrmSetNetworkParam buff, 1 End Sub milw0rm.com 2007-06-27...