The vulnerability of the backup/restore function of the video surveillance software Agent DVR allows a intruder to execute arbitrary code and upload arbitrary files.

The vulnerability of the Backup/Restore function of the video surveillance software for DVR systems is related to incorrect restrictions on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to execute arbitrary commands and upload arbitrary files...

Exploit for Code Injection in Ispyconnect Agent_Dvr

CVE-2024-22514: Remote Code Execution in Agent DVR Informa...

Exploit for Unrestricted Upload of File with Dangerous Type in Ispyconnect Agent_Dvr

CVE-2024-22515: File Upload Vulnerability in Agent DVR Inf...

PT-2024-1417 · Agent Dvr · Agent Dvr

Name of the Vulnerable Software and Affected Versions: Agent DVR version 5.1.6.0 Description: The issue is related to the Backup/Restore function in Agent DVR software, which is used for video surveillance. It involves incorrect restriction of the path name to a directory with limited access...

CVE-2020-13093

iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...

CVE-2020-13093

iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...

Directory traversal

iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...

CVE-2020-13093

iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal...

CVE-2020-13093

CVE-2020-13093 affects iSpyConnect.com Agent DVR, prior to version 2.7.1.0, exposing a path traversal vulnerability. The root cause is described as improper filtering of special path elements, enabling access to locations outside of a restricted directory. Impact details in the sources indicate p...