Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2021-47729

Selea Targa IP Camera Stored Cross-Site Scripting via Files List

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code. Attackers can send a POST request to /cgi-bin/get_file.php with crafted payload to execute arbitrary scripts in victim's browser session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

selea s.r.l. Selea Targa IP OCR-ANPR Camera

Default version status: unaffected

  • Model: iZeroaffected
  • Firmware: BLD201113005214affected
  • CPS: 4.013(201105)affected

References