Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    6 vulnerabilities by astrocam

    CVE-2008-2075 (GCVE-0-2008-2075)

    Vulnerability from nvd – Published: 2008-05-05 16:00 – Updated: 2024-08-07 08:49
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2372 records in the last 180 days details
    References
    Date Public
    2008-05-01 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:49:57.401Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
          },
          {
            "name": "20080501 XSS in AstroCam",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
          },
          {
            "name": "30039",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30039"
          },
          {
            "name": "28998",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/28998"
          },
          {
            "name": "astrocam-pic-xss(42122)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
          },
          {
            "name": "3852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/3852"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-05-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
        },
        {
          "name": "20080501 XSS in AstroCam",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
        },
        {
          "name": "30039",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30039"
        },
        {
          "name": "28998",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/28998"
        },
        {
          "name": "astrocam-pic-xss(42122)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
        },
        {
          "name": "3852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/3852"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-2075",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
              "refsource": "CONFIRM",
              "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
            },
            {
              "name": "20080501 XSS in AstroCam",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
            },
            {
              "name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126",
              "refsource": "CONFIRM",
              "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
            },
            {
              "name": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56",
              "refsource": "CONFIRM",
              "url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
            },
            {
              "name": "30039",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30039"
            },
            {
              "name": "28998",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/28998"
            },
            {
              "name": "astrocam-pic-xss(42122)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
            },
            {
              "name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup",
              "refsource": "CONFIRM",
              "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
            },
            {
              "name": "3852",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/3852"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-2075",
    "datePublished": "2008-05-05T16:00:00.000Z",
    "dateReserved": "2008-05-05T00:00:00.000Z",
    "dateUpdated": "2024-08-07T08:49:57.401Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2007-1426 (GCVE-0-2007-1426)

    Vulnerability from nvd – Published: 2007-03-13 01:00 – Updated: 2024-08-07 12:59
    VLAI
    Summary
    The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the "a" variable, which "fills up the message queue."
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2372 records in the last 180 days details
    References
    URL Tags
    http://www.vupen.com/english/advisories/2007/0901 vdb-entryx_refsource_VUPEN
    http://astrocam.svn.sourceforge.net/viewvc/astroc… x_refsource_CONFIRM
    http://www.securityfocus.com/bid/22924 vdb-entryx_refsource_BID
    http://sourceforge.net/project/shownotes.php?grou… x_refsource_CONFIRM
    http://secunia.com/advisories/24480 third-party-advisoryx_refsource_SECUNIA
    http://www.osvdb.org/32868 vdb-entryx_refsource_OSVDB
    Date Public
    2007-03-09 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:59:08.149Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2007-0901",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0901"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
          },
          {
            "name": "22924",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22924"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
          },
          {
            "name": "24480",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24480"
          },
          {
            "name": "32868",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/32868"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the \"a\" variable, which \"fills up the message queue.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-03-21T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2007-0901",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0901"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
        },
        {
          "name": "22924",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22924"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
        },
        {
          "name": "24480",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24480"
        },
        {
          "name": "32868",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/32868"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-1426",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the \"a\" variable, which \"fills up the message queue.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2007-0901",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0901"
            },
            {
              "name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
              "refsource": "CONFIRM",
              "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
            },
            {
              "name": "22924",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22924"
            },
            {
              "name": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
            },
            {
              "name": "24480",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24480"
            },
            {
              "name": "32868",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/32868"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-1426",
    "datePublished": "2007-03-13T01:00:00.000Z",
    "dateReserved": "2007-03-12T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:59:08.149Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2002-1874 (GCVE-0-2002-1874)

    Vulnerability from nvd – Published: 2005-06-28 04:00 – Updated: 2024-08-08 03:43
    VLAI
    Summary
    astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2372 records in the last 180 days details
    References
    Date Public
    2002-11-03 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:43:33.071Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
          },
          {
            "name": "1005523",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1005523"
          },
          {
            "name": "astrocam-cgi-command-execution(10538)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/10538.php"
          },
          {
            "name": "6105",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6105"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-11-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request.  NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2008-05-08T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
        },
        {
          "name": "1005523",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1005523"
        },
        {
          "name": "astrocam-cgi-command-execution(10538)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/10538.php"
        },
        {
          "name": "6105",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6105"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1874",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request.  NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
              "refsource": "CONFIRM",
              "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
            },
            {
              "name": "1005523",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1005523"
            },
            {
              "name": "astrocam-cgi-command-execution(10538)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/10538.php"
            },
            {
              "name": "6105",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6105"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1874",
    "datePublished": "2005-06-28T04:00:00.000Z",
    "dateReserved": "2005-06-29T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:43:33.071Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2008-2075 (GCVE-0-2008-2075)

    Vulnerability from cvelistv5 – Published: 2008-05-05 16:00 – Updated: 2024-08-07 08:49
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2372 records in the last 180 days details
    References
    Date Public
    2008-05-01 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:49:57.401Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
          },
          {
            "name": "20080501 XSS in AstroCam",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
          },
          {
            "name": "30039",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30039"
          },
          {
            "name": "28998",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/28998"
          },
          {
            "name": "astrocam-pic-xss(42122)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
          },
          {
            "name": "3852",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/3852"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-05-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
        },
        {
          "name": "20080501 XSS in AstroCam",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
        },
        {
          "name": "30039",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30039"
        },
        {
          "name": "28998",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/28998"
        },
        {
          "name": "astrocam-pic-xss(42122)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
        },
        {
          "name": "3852",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/3852"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-2075",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
              "refsource": "CONFIRM",
              "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
            },
            {
              "name": "20080501 XSS in AstroCam",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/491513/100/0/threaded"
            },
            {
              "name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126",
              "refsource": "CONFIRM",
              "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125\u0026r2=126"
            },
            {
              "name": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56",
              "refsource": "CONFIRM",
              "url": "http://www.wendzel.de/?sub=showpost\u0026blogid=5\u0026postid=56"
            },
            {
              "name": "30039",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30039"
            },
            {
              "name": "28998",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/28998"
            },
            {
              "name": "astrocam-pic-xss(42122)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42122"
            },
            {
              "name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup",
              "refsource": "CONFIRM",
              "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup"
            },
            {
              "name": "3852",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/3852"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-2075",
    "datePublished": "2008-05-05T16:00:00.000Z",
    "dateReserved": "2008-05-05T00:00:00.000Z",
    "dateUpdated": "2024-08-07T08:49:57.401Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2007-1426 (GCVE-0-2007-1426)

    Vulnerability from cvelistv5 – Published: 2007-03-13 01:00 – Updated: 2024-08-07 12:59
    VLAI
    Summary
    The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the "a" variable, which "fills up the message queue."
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2372 records in the last 180 days details
    References
    URL Tags
    http://www.vupen.com/english/advisories/2007/0901 vdb-entryx_refsource_VUPEN
    http://astrocam.svn.sourceforge.net/viewvc/astroc… x_refsource_CONFIRM
    http://www.securityfocus.com/bid/22924 vdb-entryx_refsource_BID
    http://sourceforge.net/project/shownotes.php?grou… x_refsource_CONFIRM
    http://secunia.com/advisories/24480 third-party-advisoryx_refsource_SECUNIA
    http://www.osvdb.org/32868 vdb-entryx_refsource_OSVDB
    Date Public
    2007-03-09 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:59:08.149Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2007-0901",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0901"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
          },
          {
            "name": "22924",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22924"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
          },
          {
            "name": "24480",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24480"
          },
          {
            "name": "32868",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/32868"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the \"a\" variable, which \"fills up the message queue.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-03-21T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2007-0901",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0901"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
        },
        {
          "name": "22924",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22924"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
        },
        {
          "name": "24480",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24480"
        },
        {
          "name": "32868",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/32868"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-1426",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the \"a\" variable, which \"fills up the message queue.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2007-0901",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0901"
            },
            {
              "name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
              "refsource": "CONFIRM",
              "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
            },
            {
              "name": "22924",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22924"
            },
            {
              "name": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/project/shownotes.php?group_id=85523\u0026release_id=492572"
            },
            {
              "name": "24480",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24480"
            },
            {
              "name": "32868",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/32868"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-1426",
    "datePublished": "2007-03-13T01:00:00.000Z",
    "dateReserved": "2007-03-12T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:59:08.149Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2002-1874 (GCVE-0-2002-1874)

    Vulnerability from cvelistv5 – Published: 2005-06-28 04:00 – Updated: 2024-08-08 03:43
    VLAI
    Summary
    astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2372 records in the last 180 days details
    References
    Date Public
    2002-11-03 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:43:33.071Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
          },
          {
            "name": "1005523",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1005523"
          },
          {
            "name": "astrocam-cgi-command-execution(10538)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/10538.php"
          },
          {
            "name": "6105",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6105"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-11-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request.  NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2008-05-08T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
        },
        {
          "name": "1005523",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1005523"
        },
        {
          "name": "astrocam-cgi-command-execution(10538)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/10538.php"
        },
        {
          "name": "6105",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6105"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1874",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request.  NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup",
              "refsource": "CONFIRM",
              "url": "http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup"
            },
            {
              "name": "1005523",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1005523"
            },
            {
              "name": "astrocam-cgi-command-execution(10538)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/10538.php"
            },
            {
              "name": "6105",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6105"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1874",
    "datePublished": "2005-06-28T04:00:00.000Z",
    "dateReserved": "2005-06-29T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:43:33.071Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}