CVE-2006-2490

Published: 19/05/2006 Updated: 18/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions prior to 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote malicious users to inject arbitrary web script or HTML via URL-encoded values in (1) the query string to help/help, (2) the get_image_info_abspath parameter to control/eventplayer, and (3) the source_ip parameter to events.tar.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mobotix mobotix ip network camera m10 2.0.5.2
mobotix mobotix ip network camera d10
mobotix mobotix ip network camera m1 1.9.4.7
mobotix mobotix ip network camera m22

source: wwwsecurityfocuscom/bid/18022/info The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the device to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in t ...

source: wwwsecurityfocuscom/bid/18022/info The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the device to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the c ...

source: wwwsecurityfocuscom/bid/18022/info The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the device to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the ...

CWE-79 http://www.eazel.es/media/advisory001.html http://www.securityfocus.com/bid/18022 http://secunia.com/advisories/20151 http://www.osvdb.org/25621 http://www.osvdb.org/25622 http://www.osvdb.org/25623 http://securitytracker.com/id?1016128 http://www.attrition.org/pipermail/vim/2006-August/000980.html http://securityreason.com/securityalert/929 http://www.vupen.com/english/advisories/2006/1857 https://exchange.xforce.ibmcloud.com/vulnerabilities/26538 http://www.securityfocus.com/archive/1/444018/100/0/threaded http://www.securityfocus.com/archive/1/434289/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/27894/

CVE-2006-2490

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect