|
|
Info |
Last Modified |
| 10 months ago |
|
|
|
|
Description |
TrackerCam contains a flaw that will allow an attacker to inject arbitrary SQL code. The problem is that login requests are logged without sanitization, allowing an attacker to inject arbitrary HTML or scripting in the username / password fields. When the logs are reviewed by an administrator via the TrackerCam interface, the HTML and/or script will be rendered in the admin's browser within the trust relationship between the browser and the server, leading to a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
|
|
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
|
|
Products |
|
TrackerCam
 |
5.12 |
|
|
|
|
Credit |
- Luigi Auriemma - aluigi
 autistici.org - http://aluigi.altervista.org
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
