Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL.
https://exchange.xforce.ibmcloud.com/vulnerabilities/27655
http://www.securityfocus.com/archive/1/450478/100/0/threaded
http://www.securityfocus.com/archive/1/440893/100/100/threaded
http://www.securityfocus.com/archive/1/439648/100/0/threaded