Vulnerabilities > Darkwet > Webcam XP > 1.6.945

DATE CVE VULNERABILITY TITLE RISK
2008-12-19 CVE-2008-5674 Improper Input Validation vulnerability in Darkwet Webcam XP
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.
network
low complexity
darkwet CWE-20
critical
9.4
2004-12-31 CVE-2004-2094 Cross-Site Scripting vulnerability in Darkwet Webcam XP 1.6.945
Cross-site scripting (XSS) vulnerability in WebcamXP 1.06.945 allows remote attackers to inject arbitrary HTML or web script as other users via a URL that contains the script.
network
darkwet
4.3