Secunia

Dr_insane has reported a vulnerability in Webcam Watchdog, which can be exploited by malicious people to conduct cross-site scripting attacks.

User input passed to the "cam" parameter in "sresult.exe" is not sanitised before being returned to users. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of a vulnerable site if the user is tricked into following a specially crafted link or visit a malicious website.

The vulnerability has been confirmed in versions 3.66 and 4.01. Other versions may also be affected.

Solution
Filter malicious characters and character sequences in a proxy server or firewall with URL filtering capabilities.

Provided and/or discovered by
Dr_insane

Original Advisory
http://members.lycos.co.uk/r34ct/main/Webcam_watchdog_401a.txt

Deep Links
Links available in Customer Area