Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL.

Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL.

Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. FlexWATCH 3.0 and prior versions are affected.

----------------------------------------------------------------------

Hardcore Disassembler / Reverse Engineer

Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also required that you write a PoC or even a working exploit to prove that an issue is exploitable.

http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE: FlexWATCH Network Camera FW-3400 Two Vulnerabilities

SECUNIA ADVISORY ID: SA20994

VERIFY ADVISORY: http://secunia.com/advisories/20994/

CRITICAL: Less critical

IMPACT: Security Bypass, Cross Site Scripting

WHERE: >From remote

OPERATING SYSTEM: FlexWATCH Network Camera FW-3400 http://secunia.com/product/10980/

DESCRIPTION: Jaime Blasco has reported two vulnerabilities in FlexWATCH Network Ca…