Vulnerability Description
Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code. Attackers can send a POST request to /cgi-bin/get_file.php with crafted payload to execute arbitrary scripts in victim's browser session.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Selea | Izero Box Full Firmware | - |
| Selea | Izero Box Full | - |
| Selea | Izero Column Entry\/8 Firmware | - |
| Selea | Izero Column Entry\/8 | - |
| Selea | Izero Column Full\/8 Firmware | - |
| Selea | Izero Column Full\/8 | - |
| Selea | Targa 504 Firmware | - |
| Selea | Targa 504 | - |
| Selea | Targa 512 Firmware | - |
| Selea | Targa 512 | - |
| Selea | Targa 704 Ilb Firmware | - |
| Selea | Targa 704 Ilb | - |
| Selea | Targa 704 Tkm Firmware | - |
| Selea | Targa 704 Tkm | - |
| Selea | Targa 710 Inox Firmware | - |
| Selea | Targa 710 Inox | - |
| Selea | Targa 750 Firmware | - |
| Selea | Targa 750 | - |
| Selea | Targa 805 Firmware | - |
| Selea | Targa 805 | - |
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/49454Exploit
- https://www.selea.comProduct
- https://www.selea.com/product/Product
- https://www.vulncheck.com/advisories/selea-targa-ip-camera-stored-cross-site-scrThird Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5614.phpThird Party Advisory
FAQ
What is CVE-2021-47729?
CVE-2021-47729 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code. Attackers can send a P...
How severe is CVE-2021-47729?
CVE-2021-47729 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-47729?
Check the references section above for vendor advisories and patch information. Affected products include: Selea Izero Box Full Firmware, Selea Izero Box Full, Selea Izero Column Entry\/8 Firmware, Selea Izero Column Entry\/8, Selea Izero Column Full\/8 Firmware.