Full title: Castel NextGen DVR 1.0.0 Bypass / CSRF / Disclosure Vulnerabilities Category: web applications Platform: php Castel NextGen DVR version 1.0.0 suffers from authorization bypass, credential disclosure, and cross site request forgery vulnerabilities. # 0day.today @ http://0day.today/