https://www.exploit-db.com/exploits/23317
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200310-088

SeyeonFlexWATCHNetworkVideoServer是一款视频服务程序。SeyeonFlexWATCH网络视频服务程序存在访问验证错误，远程攻击者可以利用这个漏洞未授权访问管理员接口。攻击者只要提交包含两个”/”符号的管理接口URL请求，就可以绕过验证，直接进行管理员级别访问，这可导致用户帐户和系统配置被修改。

source: http://www.securityfocus.com/bid/8942/info

It has been reported that FlexWATCH Network Video Server may be prone to an access validation error that may allow a remote attacker to gain administrative access to the system. The problem is reported to present itself when an attacker attempts to access the administrative interface using a specially crafted URL containing two slash '/' characters.

Successful exploitation of this issue may allow a remote attacker to gain administrator level privileges to the server. This may lead to user accounts and system configuration modifications.

FlexWATCH Network Video Server Model 132 has been reported to be prone to this issue, however other versions may be affected as well.

http://www.example.com//admin/aindex.htm

来源:OSVDB
名称:2842
链接:http://www.osvdb.org/2842
来源:XF
名称:flexwatch-slash-admin-access(13567)
链接:http://xforce.iss.net/xforce/xfdb/13567
来源:BID
名称:8942
链接:http://www.securityfocus.com/bid/8942
来源:SECTRACK
名称:1008049
链接:http://securitytracker.com/id?1008049
来源:SECUNIA
名称:10132
链接:http://secunia.com/advisories/10132
来源:packetstormsecurity.nl
链接:http://packetstormsecurity.nl/0310-exploits/FlexWATCH.txt