Vulnerabilities > Astrocam > Astrocam > 2.6.4

DATE CVE VULNERABILITY TITLE RISK
2008-05-05 CVE-2008-2075 Cross-Site Scripting vulnerability in Astrocam
Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter.
network
astrocam CWE-79
4.3
2007-03-13 CVE-2007-1426 Improper Input Validation vulnerability in Astrocam
The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the "a" variable, which "fills up the message queue."
network
low complexity
astrocam CWE-20
7.8