CVE-2009-1557

Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allow remote attackers to inject arbitrary web script or HTML via the next_file parameter to (1) main.cgi, (2) img/main.cgi, or (3) adm/file.cgi; or (4) the this_file parameter to adm/file.cgi.

• CWE-79

• http://secunia.com/advisories/34767Vendor Advisory
• http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/Exploit
• http://www.securityfocus.com/bid/34714
• http://www.vupen.com/english/advisories/2009/1173Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50224
• http://secunia.com/advisories/34767Vendor Advisory
• http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/Exploit
• http://www.securityfocus.com/bid/34714
• http://www.vupen.com/english/advisories/2009/1173Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50224

Published

May 6, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1551Multiple PHP remote file inclusion vulnerabilities in Qt qui…
• CVE-2009-1552Unspecified vulnerability in the IGMP driver in SCO Unixware…
• CVE-2009-1553Multiple cross-site scripting (XSS) vulnerabilities in the A…
• CVE-2009-1554Cross-site scripting (XSS) vulnerability in ThemeServlet.jav…
• CVE-2009-1555The Cisco Linksys WVC54GCA wireless video camera with firmwa…
• CVE-2009-1556img/main.cgi on the Cisco Linksys WVC54GCA wireless video ca…
• CVE-2009-1558Directory traversal vulnerability in adm/file.cgi on the Cis…
• CVE-2009-1559Absolute path traversal vulnerability in adm/file.cgi on the…
• CVE-2009-1560The Cisco Linksys WVC54GCA wireless video camera with firmwa…
• CVE-2009-1561Cross-site request forgery (CSRF) vulnerability in administr…
• CVE-2009-1563Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-1564Heap-based buffer overflow in vmnc.dll in the VMnc media cod…