BWA DiREX-Pro Path Disclosure Vulnerability

BWA Technology DiREX-Pro is a network video recorder from BWA Technology, Germany. A security vulnerability exists in BWA Technology DiREX-Pro version 1.2181. An attacker can exploit the vulnerability by sending an invalid 'name' parameter to the valsoft.php3 file to obtain the full path...