CVE-2006-3603

FlexWATCH Network Camera (versions 3.0 and earlier) contains a cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary web script or HTML via the URL. The CVE-2006-3603 entry documents this vulnerability with a MEDIUM severity (CVSS v2: AV:N/AC:M/Au:N/C:P/I:P...

CVE-2006-3604

The CVE-2006-3604 entry corresponds to a directory traversal vulnerability in FlexWATCH Network Camera, affecting version 3.0 and earlier. The flaw allows remote attackers to bypass access restrictions for admin pages (admin/aindex.asp and admin/aindex.html) by crafting a URL containing a .. (dot...