61 matches found
Directory traversal
Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitrary files via a ..%2F encoded dot dot slash in the URI...
CVE-2008-5862
Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitrary files via a ..%2F encoded dot dot slash in the URI...
CVE-2008-5862
CVE-2008-5862 affects webcamXP versions 5.3.2.375 and 5.3.2.410 (build 2132). The OpenVAS/NVD entries describe a directory traversal vulnerability that lets remote attackers read arbitrary files by sending a URI containing an encoded dot-dot-slash (..%2F). The issue is exposed via URL handling in...
CVE-2008-5862
Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitrary files via a ..%2F encoded dot dot slash in the URI...
webcamXP URL目录遍历漏洞
BUGTRAQ ID: 32928 webcamXP是一款商业网络摄像头软件，集成了用于共享视频的Web服务器。 webcamXP没有正确地处理URL编码的斜线，远程攻击者可以通过提交恶意URL请求执行目录遍历攻击，读取服务器上的任意文件。 moonware studios webcamXP 5.3.2.410 build 2132 厂商补丁： moonware studios ---------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.webcamxp.com...
webcamXP 5.3.2.375 File Disclosure
Directory Traversal Attack Example: http://XX.XX.XX.XX/..%2F..%2F..%2F..%2F..%2Fwindows/repair/sam http://XX.XX.XX.XX/..%2F..%2F..%2F..%2F..%2Fboot.ini -nicx0...
webcamXP 5.3.2.375 Remote File Disclosure Vulnerability
No description provided by source. Directory Traversal Attack Example: http://XX.XX.XX.XX/..%2F..%2F..%2F..%2F..%2Fwindows/repair/sam http://XX.XX.XX.XX/..%2F..%2F..%2F..%2F..%2Fboot.ini -nicx0...
CVE-2008-5674
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service device crash and read portions of memory via 1 an invalid camnum parameter to the pocketpc component and 2 an invalid...
Design/Logic Flaw
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service device crash and read portions of memory via 1 an invalid camnum parameter to the pocketpc component and 2 an invalid...
WebcamXP 5.3.2.375 - Remote File Disclosure
Directory Traversal Attack Example: http://XX.XX.XX.XX/..%2F..%2F..%2F..%2F..%2Fwindows/repair/sam http://XX.XX.XX.XX/..%2F..%2F..%2F..%2F..%2Fboot.ini -nicx0 milw0rm.com 2008-12-19...
WebcamXP 5.3.2.375 - Remote File Disclosure
WebcamXP 5.3.2.375 - Remote File Disclosure Directory Traversal Attack Example: http://XX.XX.XX.XX/..%2F..%2F..%2F..%2F..%2Fwindows/repair/sam http://XX.XX.XX.XX/..%2F..%2F..%2F..%2F..%2Fboot.ini -nicx0 milw0rm.com 2008-12-19...
webcamXP 5.3.2.375 Remote File Disclosure Vulnerability
Exploit for unknown platform in category remote exploits ======================================================= webcamXP 5.3.2.375 Remote File Disclosure Vulnerability ======================================================= Directory Traversal Attack Example:...
CVE-2008-5674
CVE-2008-5674 affects Darkwet Network webcamXP (Windows) before versions 3.72.440.0 and beta 4.05.280 and earlier. The HTTP server is vulnerable to multiple array index errors in the pocketpc component (invalid camnum) and the show_gallery_pic component (invalid id), allowing remote attackers to ...
CVE-2008-5674
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service device crash and read portions of memory via 1 an invalid camnum parameter to the pocketpc component and 2 an invalid...
webcamXP多个信息泄露及拒绝服务漏洞
BUGTRAQ ID: 27875 webcamXP是一款商业网络摄像头软件，集成了用于共享视频的Web服务器。 webcamXP内部集成的HTTP服务器没有正确的处理传送给pocketpc和showgallerypic文件的参数，如果远程攻击者提交了超长camnum或id参数的话，就可能导致阻断用户接口，或读取8个字节的进程内存。 moonware studios webcamXP = beta 4.05.280 moonware studios webcamXP = 3.72.440.0 厂商补丁： moonware studios ----------------...
Access violation and limited informations disclosure in webcamXP 3.72.440.0
Luigi Auriemma Application: webcamXP http://www.webcamxp.com Versions: = 3.72.440.0 = beta 4.05.280 Platforms: Windows Bug: access violation with limited informations disclosure Exploitation: remote Date: 18 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introducti...
webcamXP information leak
Memory content leakage...
WebcamXP 3.72.4404.05.280 Beta - pocketpc?camnum Arbitrary Memory Disclosure
WebcamXP 3.72.4404.05.280 Beta - pocketpc?camnum Arbitrary Memory Disclosure source: https://www.securityfocus.com/bid/27875/info webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data. Attackers can exploit...
WebcamXP 3.72.4404.05.280 Beta - show_gallery_pic?id Arbitrary Memory Disclosure
WebcamXP 3.72.4404.05.280 Beta - showgallerypic?id Arbitrary Memory Disclosure source: https://www.securityfocus.com/bid/27875/info webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data. Attackers can exploit...
WebcamXP 3.72.440/4.05.280 Beta - '/pocketpc?camnum' Arbitrary Memory Disclosure
source: https://www.securityfocus.com/bid/27875/info webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data. Attackers can exploit these issues to access potentially sensitive information or crash the...