Anni 5 in 1 XVR Information Disclosure Vulnerability

Anni 5 in 1 XVR is a multi-functional DVR device from China Anni Anni Digital Technology Company. A security vulnerability exists in the download.rsp file in the Anni 5 in 1 XVR device. A remote attacker can exploit this vulnerability to download configuration information and obtain passwords...