Advantech WebAccess SCADA gmicons.asp picfile Arbitrary File Upload (CVE-2017-16736)

An arbitrary file upload vulnerability exists in Advantech WebAccess SCADA software. The vulnerability is due to insufficient input validation of the picfile parameter within gmicons.asp...

CVE-2008-2075

Cross-site scripting XSS vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter...