CVE-2006-3603

FlexWATCH Network Camera (versions 3.0 and earlier) contains a cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary web script or HTML via the URL. The CVE-2006-3603 entry documents this vulnerability with a MEDIUM severity (CVSS v2: AV:N/AC:M/Au:N/C:P/I:P...

PT-2006-4479 · Flexwatch · Flexwatch Network Camera

Name of the Vulnerable Software and Affected Versions: FlexWATCH Network Camera versions 3.0 and earlier Description: A directory traversal issue allows remote attackers to bypass access restrictions for sensitive pages, such as "admin/aindex.asp" or "admin/aindex.html", by using a ".." dot dot a...

PT-2006-4478 · Flexwatch · Flexwatch Network Camera

Name of the Vulnerable Software and Affected Versions: FlexWATCH Network Camera versions 3.0 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the URL. Recommendations: F...

2006300687985463.txt

Digital Armaments advisory is 04.15.2006 http://www.digitalarmaments.com/2006300687985463.html I. Background FlexWATCH is a stand-alone network camera server with built-in CMOS camera and web server which deliver crisp real time live videos at a rate up to 30fps over the network. It is normally...

FlexWATCH 3.0 - AIndex.asp Authentication Bypass

FlexWATCH 3.0 - AIndex.asp Authentication Bypass source: https://www.securityfocus.com/bid/18948/info FlexWatch is prone to an authorization-bypass vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. An attacker can exploit this issue to bypass...

FlexWATCH 3.0 - 'AIndex.asp' Authentication Bypass

source: https://www.securityfocus.com/bid/18948/info FlexWatch is prone to an authorization-bypass vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. An attacker can exploit this issue to bypass the authorization mechanism. This allows the...

Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability

Digital Armaments advisory is 04.15.2006 http://www.digitalarmaments.com/2006300687985463.html I. Background FlexWATCH is a stand-alone network camera server with built-in CMOS camera and web server which deliver crisp real time live videos at a rate up to 30fps over the network. It is normally...

Multiple FlexWATCH network camera security vulnerabilities

Crossite scripting, authentication bypass...

FlexWATCH Network Camera - Cross-Site Scripting

FlexWATCH Network Camera - Cross-Site Scripting source: https://www.securityfocus.com/bid/18936/info FlexWATCH Network Camera is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

FlexWATCH Network Camera - Cross-Site Scripting

source: https://www.securityfocus.com/bid/18936/info FlexWATCH Network Camera is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in...

FlexWATCH Authentication Bypassing

There is a vulnerability in the current version of FlexWATCH that allows an attacker to access administrative sections without being required to authenticate. An attacker may use this flaw to gain the list of user accounts on this system and the ability to reconfigure this service. This is done b...

FlexWATCH Authentication Bypassing

There is a vulnerability in the current version of FlexWATCH that allows an attacker to access administrative sections without being required to authenticate. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2003-1160

The provided connected sources indicate that FlexWATCH Network video server 132 is vulnerable to an authentication bypass. An HTTP request to aindex.htm containing double leading slashes (//) can allow a remote attacker to bypass authentication and gain administrative privileges. OpenVAS notes th...

CVE-2003-1160

FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes //...

FlexWATCH unauthorized access

Authentication can be bypassed...

FlexWATCH-Webs 2.2 (NTSC) Authorization Bypass

Application: FlexWATCH-Webs Vendors: Seyeon TECH Co., Ltd. http://www.flexwatch.com/ http://www.seyeon.co.kr Versions: = 2.2 NTSC Platforms: Windows Bug: Authorization Bypass Risk: Very High Exploitation: Remote with browser Date: 26 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail:...

Seyeon Technology FlexWATCH Server 2.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9739/info It has been reported that FlexWATCH may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute arbitrary HTML or script code in a user's browser. These issues have been reported to exist in FlexWATCH version...

Seyeon Technology FlexWATCH Server 2.2 - Cross-Site Scripting

Seyeon Technology FlexWATCH Server 2.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/9739/info It has been reported that FlexWATCH may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute arbitrary HTML or script code in a user's browser...

Flexwatch22.txt

Application: FlexWATCH-Webs Vendors: Seyeon TECH Co., Ltd. http://www.flexwatch.com/ http://www.seyeon.co.kr Versions: = 2.2 NTSC Platforms: Windows Bug: Authorization Bypass Risk: Very High Exploitation: Remote with browser Date: 26 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail:...

Security_FlexWATCH-2.txt

============================================================= Unauthorized Access vulnerability in FlexWATCH camera Server Second Assault ! ============================================================= Author: SLAIZER mail: slaizeratphreaker.net Vendor : SEYEON Technology System : FlexWATCH Netwo...