https://www.exploit-db.com/exploits/25643
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200505-1025

GeoVisionDigitalVideoSurveillanceSystem6.04、6.1和7.0，当设置为创建JPEG图像时，未正确保护图像，即便已经分配了密码和用户名，远程攻击者可能通过直接请求图像而获取敏感信息。

source: http://www.securityfocus.com/bid/13571/info

GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server.

This issue results from an access validation error.

GeoVision Digital Surveillance System versions 6.04 or 6.1 are reportedly vulnerable. 

http://www.example.com/cam1.jpg
http://www.example.com/cam2.jpg
http://www.example.com/cam[1-16].jpg

来源:XF
名称:geovision-authentication(20537)
链接:http://xforce.iss.net/xforce/xfdb/20537
来源:BID
名称:13571
链接:http://www.securityfocus.com/bid/13571
来源:OSVDB
名称:16340
链接:http://www.osvdb.org/16340
来源:MISC
链接:http://www.esqo.com/research/advisories/2005/100505-1.txt
来源:SECUNIA
名称:15330
链接:http://secunia.com/advisories/15330
来源:BUGTRAQ
名称:20050510Esqoadvisory:GeoVisionDigitalVideoSurveillanceSystem-Multipleauthenticationissues
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=111574131105737&w;=2