CVE-2011-5261

Published: Feb 12, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the pageTitle parameter to admin/showReport.shtml.

Affected (2)

Products: Axis: M10 Series Network Cameras Firmware, M1054 Network Camera

Axis

2 products

M10 Series Network Cameras Firmware

M1054 Network Camera

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Axis M10 Series Network Cameras Firmware	Up to 5.21
Axis M1054 Network Camera	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (10)

http://metzgersecurity.blogspot.com/2011/11/xss-vulnerability-axis-m10-series.html

Source: cve@mitre.org

Exploit

http://osvdb.org/77395

Source: cve@mitre.org

http://secunia.com/advisories/47037

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/50968

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/71687

Source: cve@mitre.org

http://metzgersecurity.blogspot.com/2011/11/xss-vulnerability-axis-m10-series.html