CVE-2018-7049

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager causing script injection and/or reflection via a crafted HTTP request...

CVE-2018-7047

CVE-2018-7047 affects Wowza Streaming Engine prior to 4.7.1. The vulnerability is in the MBeans Server where the filesystem can be read and written via JMX using the default JMX credentials, with remote code execution possible. Impact includes potential unauthorized file access and execution of c...

CVE-2018-7048

CVE-2018-7048 affects Wowza Streaming Engine prior to 4.7.1. The issue is a denial-of-service caused by memory consumption triggered by a crafted HTTP request, with network-based attack vector and no authentication required per the available descriptions. The NVD entry documents a base score of 5...

CVE-2018-7048

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

CVE-2018-7047: Use of Hard-coded Credentials

An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials remote code execution may be possible as well...

CVE-2018-7048: Uncontrolled Resource Consumption

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

CVE-2018-7049: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager causing script injection and/or reflection via a crafted HTTP request...

Wowza Streaming Engine Detection (RTSP)

RTSP based detection of Wowza Streaming Engine. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Multiple Cross-Site Scripting Vulnerabilities in Wowza Streaming Engine

Wowza Streaming Engine is powerful media server software that provides reliable and smooth high quality video and audio delivery to any device. Wowza Streaming Engine suffers from multiple cross-site scripting vulnerabilities by entering several parameters script before unverified. An attacker ca...

Wowza Streaming Engine Cross-Site Request Forgery Vulnerability

Wowza Streaming Engine is powerful media server software that provides reliable and smooth high quality video and audio transmission to any device. A cross-site request forgery vulnerability exists in Wowza Streaming Engine, which can be exploited by an attacker to perform certain actions with...

Wowza Streaming Engine 4.5.0 - Multiple Cross-Site Scripting Vulnerabilities

Wowza Streaming Engine 4.5.0 - Multiple Cross-Site Scripting Vulnerabilities Wowza Streaming Engine 4.5.0 Multiple Cross-Site Scripting Vulnerabilities Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza...

Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation

Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation input type="hidden" name="version" value="0"...

Wowza Streaming Engine 4.5.0 - Privilege Escalation (2)

Exploit for multiple platform in category web applications form action="http://localhost:8088/enginemanager/server/user/edit.htm" method...

Wowza Streaming Engine 4.5.0 - Privilege Escalation (1)

Exploit for windows platform in category local exploits Wowza Streaming Engine 4.5.0 Local Privilege Escalation Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: Wowza Streaming Engine 4.5.0 build 18676 Wowza Streaming Engine Manager 4.5.0 build 18676...

Wowza Streaming Engine 4.5.0 - Local Privilege Escalation

Wowza Streaming Engine 4.5.0 Local Privilege Escalation Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: Wowza Streaming Engine 4.5.0 build 18676 Wowza Streaming Engine Manager 4.5.0 build 18676 Summary: Wowza Streaming Engine is robust, customizable, an...

Wowza Streaming Engine 4.5.0 Remote Privilege Escalation

i? Wowza Streaming Engine 4.5.0 Remote Privilege Escalation Exploit Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza Streaming Engine is robust, customizable, and scalable server software that powers reliabl...

Wowza Streaming Engine 4.5.0 - Cross-Site Request Forgery (Add Advanced Admin)

Wowza Streaming Engine 4.5.0 - Cross-Site Request Forgery Add Advanced Admin input type...

Wowza Streaming Engine 4.5.0 - Local Privilege Escalation

Wowza Streaming Engine 4.5.0 - Local Privilege Escalation Wowza Streaming Engine 4.5.0 Local Privilege Escalation Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: Wowza Streaming Engine 4.5.0 build 18676 Wowza Streaming Engine Manager 4.5.0 build 18676...

Wowza Streaming Engine 4.5.0 Cross Site Request Forgery

i? Wowza Streaming Engine 4.5.0 CSRF Add Advanced Admin Exploit Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza Streaming Engine is robust, customizable, and scalable server software that powers reliable...

Wowza Streaming Engine 4.5.0 - Multiple Cross-Site Scripting

Exploit for multiple platform in category web applications Wowza Streaming Engine 4.5.0 Multiple Cross-Site Scripting Vulnerabilities Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza Streaming Engine is...