Axis M10 Series Network Cameras – Cross-Site Scripting

Exploit Database
114 阅读

作者： Matt Metzger

日期： 2011-12-07
类别：
- remote
平台：
- hardware
来源：https://www.exploit-db.com/exploits/36428/

source: https://www.securityfocus.com/bid/50968/info

Axis M10 Series Network Cameras are prone to a cross-site scripting vulnerability because they fail to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Axis M1054 firmware 5.21 is vulnerable; other version may also be affected.

http://www.example.com/admin/showReport.shtml?content=serverreport.cgi&pageTitle=%3C%2Ftitle%3E%3Cscript%3Ealert(String.fromCharCode(88%2C83%2C83))%3B%3C%2Fscript%3E%3Ctitle%3E

last Exploits
Axis M10 Series Network Cameras – Cross-Site Scripting的更多信息

Easy File Sharing Web Server 7.2 – HEAD Request Buffer Overflow (SEH)：
Microsoft Windows 7 (x86) – ‘BlueKeep’ Remote Desktop Protocol (RDP) Remote Windows Kernel Use After Free：
Microsoft Internet Explorer 8 – ‘toStaticHTML()’ HTML Sanitization Bypass：
MX Simulator Server – Remote Buffer Overflow：
HP Data Protector – CMD Install Service (Metasploit)：
SharePoint Workflows – XOML Injection (Metasploit)：
Java – AtomicReferenceArray Type Violation (Metasploit)：
Sunway ForceControl 6.1 – Multiple Heap Buffer Overflow Vulnerabilities：