CVEvulnerability
CVE-2011-5261
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-02-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the pageTitle parameter to admin/showReport.shtml.
Affected configurations
• axis m10 series network cameras firmware (<= 5.21)
• axis m1054 network camera
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://metzgersecurity.blogspot.com/2011/11/xss-vulnerability-axis-m10-series.html Exploit
- http://osvdb.org/77395 osvdb.org
- http://secunia.com/advisories/47037 Vendor Advisory
- http://www.securityfocus.com/bid/50968 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71687 exchange.xforce.ibmcloud.com
- http://metzgersecurity.blogspot.com/2011/11/xss-vulnerability-axis-m10-series.html Exploit
- http://osvdb.org/77395 osvdb.org
- http://secunia.com/advisories/47037 Vendor Advisory
- http://www.securityfocus.com/bid/50968 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71687 exchange.xforce.ibmcloud.com