Vulnerabilities > Darkwet

DATE CVE VULNERABILITY TITLE RISK
2008-12-19 CVE-2008-5674 Improper Input Validation vulnerability in Darkwet Webcam XP
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.
network
low complexity
darkwet CWE-20
critical
9.4
2004-12-31 CVE-2004-2094 Cross-Site Scripting vulnerability in Darkwet Webcam XP 1.6.945
Cross-site scripting (XSS) vulnerability in WebcamXP 1.06.945 allows remote attackers to inject arbitrary HTML or web script as other users via a URL that contains the script.
network
darkwet
4.3
2003-12-31 CVE-2003-1479 Cross-Site Scripting vulnerability in Darkwet Webcam XP 1.02.432/1.02.535
Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field.
network
darkwet CWE-79
4.3