CVE-2004-2425

Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi.

• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.htmlExploit
• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/12353Patch, Vendor Advisory
• http://securitytracker.com/id?1011056Exploit, Patch
• http://www.osvdb.org/9121
• http://www.securityfocus.com/bid/11011Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17076
• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.htmlExploit
• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/12353Patch, Vendor Advisory
• http://securitytracker.com/id?1011056Exploit, Patch
• http://www.osvdb.org/9121
• http://www.securityfocus.com/bid/11011Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17076

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2419Keene Digital Media Server 1.0.2 allows local users to obtai…
• CVE-2004-2420Hitachi Job Management Partner (JP1) JP1/File Transmission S…
• CVE-2004-2421Unknown vulnerability in Hitachi Job Management Partner (JP1…
• CVE-2004-2422Multiple features in Ipswitch IMail Server before 8.13 allow…
• CVE-2004-2423Unknown vulnerability in the Web calendaring component of Ip…
• CVE-2004-2424BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2…
• CVE-2004-2426Directory traversal vulnerability in Axis Network Camera 2.4…
• CVE-2004-2427Axis Network Camera 2.40 and earlier, and Video Server 3.12 …
• CVE-2004-2428Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the we…
• CVE-2004-2429Multiple stack-based and heap-based buffer overflows in Ende…
• CVE-2004-2430Trend OfficeScan Corporate Edition 5.58 and possibly earler …
• CVE-2004-2431Unknown vulnerability in The Ignition Project ignitionServer…