Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via (1) parameters associated with saved settings, as demonstrated by the conf_SMTP_MailServer1 parameter to ServerManager.srv; or (2) the subpage parameter to wizard/first/wizard_main_first.shtml. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Firmware AXIS 2100 Network Camera 多个跨站脚本攻击漏洞
Vulnerability Description
firmware版本之前的版本2.43中的AXIS 2100 Network Camera 2.02存在多个跨站脚本攻击漏洞，远程攻击者可以借助(1)与保存设置相联系的参数，比如ServerManager.srv中的conf_SMTP_MailServer1参数；或(2)wizard/first/wizard_main_first.shtml的subpage参数注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A