Unscored severity · published Dec 31, 2004
CVE-2004-2528
Cross-site scripting (XSS) vulnerability in sresult.exe in Webcam Watchdog 4.0.1a allows remote attackers to inject arbitrary web script or HTML via the cam parameter
–
CVSS
3.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in sresult.exe in Webcam Watchdog 4.0.1a allows remote attackers to inject arbitrary web script or HTML via the cam parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WW
Webcam Watchdog · Webcam Corp
4.0.1a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2528
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2528
Exploit
http://members.lycos.co.uk/r34ct/main/Webcam_watchdog_401a.txt
Vendor Advisory
http://secunia.com/advisories/12199
Exploit
http://securitytracker.com/id?1010824
www.osvdb.org
http://www.osvdb.org/8260
Exploit
http://www.securityfocus.com/bid/10837
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16854
More from Webcam Watchdog
–
CVE-2004-1784
Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request