NVD

Id
57290  
Name
CVE-2007-5214  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to the default URI associated with a directory, as demonstrated by (a) the root directory and (b) the view/ directory; (2) parameters associated with saved settings, as demonstrated by (c) the conf_Network_HostName parameter on the Network page and (d) the conf_Layout_OwnTitle parameter to ServerManager.srv; and (3) the query string to ServerManager.srv, which is displayed on the logs page. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-10-04  
Modified Date
2008-11-15  
Seq
2007-5214  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292538 57290 CVE-2007-5214 3188  View
292539 57290 CVE-2007-5214 http://www.procheckup.com/Vulnerability_Axis_2100_research.pdf  View
292540 57290 CVE-2007-5214 20070928 Owning Big Brother: How to Crack into Axis IP cameras  View
292541 57290 CVE-2007-5214 25837  View
292542 57290 CVE-2007-5214 axis2100-networksettings-xss(36840)  View
292543 57290 CVE-2007-5214 axis2100-videoviewing-xss(36841)  View
292544 57290 CVE-2007-5214 axis2100-logpage-xss(36842)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54030 JVNDB-2007-002722 AXIS 2100 Network Camera におけるクロスサイトスクリプティングの脆弱性 AXIS 2100 Network Camera with firmware には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5214 28569 CVE-2007-5214 57290 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002722.html 2007-10-04 2012-06-26 View