Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
6 vulnerabilities by astrocam
CVE-2008-2075 (GCVE-0-2008-2075)
Vulnerability from nvd – Published: 2008-05-05 16:00 – Updated: 2024-08-07 08:49
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://astrocam.svn.sourceforge.net/viewvc/astroc… | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/491513/100… | mailing-listx_refsource_BUGTRAQ |
| http://astrocam.svn.sourceforge.net/viewvc/astroc… | x_refsource_CONFIRM |
| http://www.wendzel.de/?sub=showpost&blogid=5&postid=56 | x_refsource_CONFIRM |
| http://secunia.com/advisories/30039 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/28998 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://astrocam.svn.sourceforge.net/viewvc/astroc… | x_refsource_CONFIRM |
| http://securityreason.com/securityalert/3852 | third-party-advisoryx_refsource_SREASON |
Date Public
2008-05-01 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T08:49:57.401Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "20080501 XSS in AstroCam",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
},
{
"name": "30039",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/30039"
},
{
"name": "28998",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/28998"
},
{
"name": "astrocam-pic-xss(42122)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
},
{
"name": "3852",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/3852"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-05-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-11T19:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "20080501 XSS in AstroCam",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
},
{
"name": "30039",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/30039"
},
{
"name": "28998",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/28998"
},
{
"name": "astrocam-pic-xss(42122)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
},
{
"name": "3852",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/3852"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-2075",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
"refsource": "CONFIRM",
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "20080501 XSS in AstroCam",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
},
{
"name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126",
"refsource": "CONFIRM",
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
},
{
"name": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56",
"refsource": "CONFIRM",
"url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
},
{
"name": "30039",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30039"
},
{
"name": "28998",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/28998"
},
{
"name": "astrocam-pic-xss(42122)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
},
{
"name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup",
"refsource": "CONFIRM",
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
},
{
"name": "3852",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/3852"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-2075",
"datePublished": "2008-05-05T16:00:00.000Z",
"dateReserved": "2008-05-05T00:00:00.000Z",
"dateUpdated": "2024-08-07T08:49:57.401Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-1426 (GCVE-0-2007-1426)
Vulnerability from nvd – Published: 2007-03-13 01:00 – Updated: 2024-08-07 12:59
VLAI
EPSS
VEX
Summary
The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the "a" variable, which "fills up the message queue."
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2007/0901 | vdb-entryx_refsource_VUPEN |
| http://astrocam.svn.sourceforge.net/viewvc/astroc… | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/22924 | vdb-entryx_refsource_BID |
| http://sourceforge.net/project/shownotes.php?grou… | x_refsource_CONFIRM |
| http://secunia.com/advisories/24480 | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/32868 | vdb-entryx_refsource_OSVDB |
Date Public
2007-03-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T12:59:08.149Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2007-0901",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/0901"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "22924",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/22924"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
},
{
"name": "24480",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24480"
},
{
"name": "32868",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/32868"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-03-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the \"a\" variable, which \"fills up the message queue.\""
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-03-21T09:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2007-0901",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/0901"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "22924",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/22924"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
},
{
"name": "24480",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24480"
},
{
"name": "32868",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/32868"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1426",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the \"a\" variable, which \"fills up the message queue.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2007-0901",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/0901"
},
{
"name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
"refsource": "CONFIRM",
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "22924",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/22924"
},
{
"name": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
},
{
"name": "24480",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24480"
},
{
"name": "32868",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/32868"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-1426",
"datePublished": "2007-03-13T01:00:00.000Z",
"dateReserved": "2007-03-12T00:00:00.000Z",
"dateUpdated": "2024-08-07T12:59:08.149Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2002-1874 (GCVE-0-2002-1874)
Vulnerability from nvd – Published: 2005-06-28 04:00 – Updated: 2024-08-08 03:43
VLAI
EPSS
VEX
Summary
astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://astrocam.svn.sourceforge.net/viewvc/astroc… | x_refsource_CONFIRM |
| http://securitytracker.com/id?1005523 | vdb-entryx_refsource_SECTRACK |
| http://www.iss.net/security_center/static/10538.php | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/6105 | vdb-entryx_refsource_BID |
Date Public
2002-11-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T03:43:33.071Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "1005523",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1005523"
},
{
"name": "astrocam-cgi-command-execution(10538)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "http://www.iss.net/security_center/static/10538.php"
},
{
"name": "6105",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/6105"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2002-11-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2008-05-08T09:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "1005523",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1005523"
},
{
"name": "astrocam-cgi-command-execution(10538)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "http://www.iss.net/security_center/static/10538.php"
},
{
"name": "6105",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/6105"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2002-1874",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
"refsource": "CONFIRM",
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "1005523",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1005523"
},
{
"name": "astrocam-cgi-command-execution(10538)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/10538.php"
},
{
"name": "6105",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/6105"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2002-1874",
"datePublished": "2005-06-28T04:00:00.000Z",
"dateReserved": "2005-06-29T00:00:00.000Z",
"dateUpdated": "2024-08-08T03:43:33.071Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2008-2075 (GCVE-0-2008-2075)
Vulnerability from cvelistv5 – Published: 2008-05-05 16:00 – Updated: 2024-08-07 08:49
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://astrocam.svn.sourceforge.net/viewvc/astroc… | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/491513/100… | mailing-listx_refsource_BUGTRAQ |
| http://astrocam.svn.sourceforge.net/viewvc/astroc… | x_refsource_CONFIRM |
| http://www.wendzel.de/?sub=showpost&blogid=5&postid=56 | x_refsource_CONFIRM |
| http://secunia.com/advisories/30039 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/28998 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://astrocam.svn.sourceforge.net/viewvc/astroc… | x_refsource_CONFIRM |
| http://securityreason.com/securityalert/3852 | third-party-advisoryx_refsource_SREASON |
Date Public
2008-05-01 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T08:49:57.401Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "20080501 XSS in AstroCam",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
},
{
"name": "30039",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/30039"
},
{
"name": "28998",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/28998"
},
{
"name": "astrocam-pic-xss(42122)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
},
{
"name": "3852",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/3852"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-05-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-11T19:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "20080501 XSS in AstroCam",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
},
{
"name": "30039",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/30039"
},
{
"name": "28998",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/28998"
},
{
"name": "astrocam-pic-xss(42122)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
},
{
"name": "3852",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/3852"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-2075",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
"refsource": "CONFIRM",
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "20080501 XSS in AstroCam",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
},
{
"name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126",
"refsource": "CONFIRM",
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
},
{
"name": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56",
"refsource": "CONFIRM",
"url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
},
{
"name": "30039",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30039"
},
{
"name": "28998",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/28998"
},
{
"name": "astrocam-pic-xss(42122)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
},
{
"name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup",
"refsource": "CONFIRM",
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
},
{
"name": "3852",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/3852"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-2075",
"datePublished": "2008-05-05T16:00:00.000Z",
"dateReserved": "2008-05-05T00:00:00.000Z",
"dateUpdated": "2024-08-07T08:49:57.401Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-1426 (GCVE-0-2007-1426)
Vulnerability from cvelistv5 – Published: 2007-03-13 01:00 – Updated: 2024-08-07 12:59
VLAI
EPSS
VEX
Summary
The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the "a" variable, which "fills up the message queue."
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2007/0901 | vdb-entryx_refsource_VUPEN |
| http://astrocam.svn.sourceforge.net/viewvc/astroc… | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/22924 | vdb-entryx_refsource_BID |
| http://sourceforge.net/project/shownotes.php?grou… | x_refsource_CONFIRM |
| http://secunia.com/advisories/24480 | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/32868 | vdb-entryx_refsource_OSVDB |
Date Public
2007-03-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T12:59:08.149Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2007-0901",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/0901"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "22924",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/22924"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
},
{
"name": "24480",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24480"
},
{
"name": "32868",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/32868"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-03-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the \"a\" variable, which \"fills up the message queue.\""
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-03-21T09:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2007-0901",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/0901"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "22924",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/22924"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
},
{
"name": "24480",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24480"
},
{
"name": "32868",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/32868"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1426",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the \"a\" variable, which \"fills up the message queue.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2007-0901",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/0901"
},
{
"name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
"refsource": "CONFIRM",
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "22924",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/22924"
},
{
"name": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
},
{
"name": "24480",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24480"
},
{
"name": "32868",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/32868"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-1426",
"datePublished": "2007-03-13T01:00:00.000Z",
"dateReserved": "2007-03-12T00:00:00.000Z",
"dateUpdated": "2024-08-07T12:59:08.149Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2002-1874 (GCVE-0-2002-1874)
Vulnerability from cvelistv5 – Published: 2005-06-28 04:00 – Updated: 2024-08-08 03:43
VLAI
EPSS
VEX
Summary
astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://astrocam.svn.sourceforge.net/viewvc/astroc… | x_refsource_CONFIRM |
| http://securitytracker.com/id?1005523 | vdb-entryx_refsource_SECTRACK |
| http://www.iss.net/security_center/static/10538.php | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/6105 | vdb-entryx_refsource_BID |
Date Public
2002-11-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T03:43:33.071Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "1005523",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1005523"
},
{
"name": "astrocam-cgi-command-execution(10538)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "http://www.iss.net/security_center/static/10538.php"
},
{
"name": "6105",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/6105"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2002-11-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2008-05-08T09:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "1005523",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1005523"
},
{
"name": "astrocam-cgi-command-execution(10538)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "http://www.iss.net/security_center/static/10538.php"
},
{
"name": "6105",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/6105"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2002-1874",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
"refsource": "CONFIRM",
"url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
},
{
"name": "1005523",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1005523"
},
{
"name": "astrocam-cgi-command-execution(10538)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/10538.php"
},
{
"name": "6105",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/6105"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2002-1874",
"datePublished": "2005-06-28T04:00:00.000Z",
"dateReserved": "2005-06-29T00:00:00.000Z",
"dateUpdated": "2024-08-08T03:43:33.071Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}