QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-2490

Back to search

CVE-2006-2490

Published: May 19, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrary web script or HTML via URL-encoded values in (1) the query string to help/help, (2) the get_image_info_abspath parameter to control/eventplayer, and (3) the source_ip parameter to events.tar.

VendorProductVersions

n/a

n/a

affected
n/a

References

18022
vdb-entry
x_refsource_BID
20151
third-party-advisory
x_refsource_SECUNIA
25621
vdb-entry
x_refsource_OSVDB
1016128
vdb-entry
x_refsource_SECTRACK
25622
vdb-entry
x_refsource_OSVDB
929
third-party-advisory
x_refsource_SREASON
ADV-2006-1857
vdb-entry
x_refsource_VUPEN
mobotix-multiple-xss(26538)
vdb-entry
x_refsource_XF
25623
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now