This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).
Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device
Severity: high
Fingerprint: 321975614123c6c05f83e99b651b0155e8c665d6e8c665d6e8c665d6e8c665d6
Found HiSiliconDVR firmware: Hardware: General AHB7032F-LM-V2 Vulnerable to multiple issues : LFI, possibly RCE
Open service 24.133.105.47:80
2024-09-15 21:16
HTTP/1.0 200 OK Content-type: text/html Server: uc-httpd 1.0.0 Expires: 0 Page title: NEUTRON <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" > <title>NEUTRON</title> <link rel="stylesheet" type="text/css" media="screen" href="m.css" /> <!-- m.js --> <script type="text/javascript" language="JavaScript"> if(navigator.userAgent.indexOf('IE') < 0) { var userAgent = navigator.userAgent, rMsie = /(msie\s|trident.*rv:)([\w.]+)/, rFirefox = /(firefox)\/([\w.]+)/, rOpera = /(opera).+version\/([\w.]+)/, rChrome = /(chrome)\/([\w.]+)/, rSafari = /version\/([\w.]+).*(safari)/; var browserMatch = uaMatch(userAgent.toLowerCase()); if(browserMatch.browser!="IE") { location="Login.htm"; } } function uaMatch(ua) { var match = rMsie.exec(ua); if (match != null) { return { browser : "IE", version : match[2] || "0" }; } var match = rFirefox.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rOpera.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rChrome.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rSafari.exec(ua); if (match != null) { return { browser : match[2] || "", version : match[1] || "0" }; } if (match != null) { return { browser : "", version : "0" }; } } </script> <script type="text/javascript" src="m.jsp"></script> <script type="text/javascript" > var ipaddress =document.location.hostname; var hostport=34567; var iLanguage=110; if (ipaddress == "") { ipaddress = "10.10.36.152"; // ipaddress = "10.2.4.55"; } </script> <!-- 原始函数 --> <script> var gExitChannel=new Array(); var gExitSubType=new Array(); var gexiti; var gcid=-1; var g_channelNum=4; var gsld; var gslda; var gsldb; var gsldc; var gsldd; var gfmu1=0; var gfmu2=0; var gfmu3=0; var g_bRecord=false; var g_bRealPlay=false; var g_bAudio=false; var g_bQS=false; var g_bSubQS1=true; var g_bSubQS2=true; var g_bSubQS3=true; var g_bSubQS4=false; var g_strSubQS4Name = ''; var g_bClose=false; var gHashCookie = new Hash.Cookie('NetSuveillanceWebCookie',{duration: 30}); var settings = { username:'' } var gca=0; var gcb=0; var gcc=0; var gcd=0; var gAutoPlayAll=false; var gdomready=0; var gopenall=0; var gsld; //var gslde; var gwid=0; var gcid=-1; var gptz=0; var gxh=0; var gxz=0; var gxs=0; var gxj=0; var gdj=0; var gdg=0; var gfmu1=0; var gfmnudj=0; var gomnudj=null; var gwid=0; var i=0; var j=0; var glhight=0; var grhight=287; function ld() { gexiti=0; gExitChannel[0]=0; gExitSubType[0]=true; var username = $("username").value; var password = $("password").value; var r=ocx.Login(ipaddress,hostport,username,password); if (r>0 ){ // resize(); getcl(); timeup(2); $('password').value=""; $('l').style.display="none"; $('m').style.top="0px"; settings['username'] = username; savesetting(); if(gAutoPlayAll) { ocx.PlayAll(); } g_bClose=false; } } function lo() { $('QS').style.display='none'; g_bClose=true; if (ocx.Logout()>=0) { loeft(); } } function loeft() { $('m').style.top="-10000px"; $('l
Open service 24.133.105.47:80
2024-09-13 21:04
HTTP/1.0 200 OK Content-type: application/binary Server: uc-httpd 1.0.0 Expires: 0 Page title: 404 File Not Found <html><head><title>404 File Not Found</title></head> <body>The requested URL was not found on this server</body></html>
Open service 24.133.105.47:80
2024-09-11 01:48
HTTP/1.0 200 OK Content-type: application/binary Server: uc-httpd 1.0.0 Expires: 0 Page title: 404 File Not Found <html><head><title>404 File Not Found</title></head> <body>The requested URL was not found on this server</body></html>
Open service 24.133.105.47:80
2024-09-09 21:11
HTTP/1.0 200 OK Content-type: application/binary Server: uc-httpd 1.0.0 Expires: 0 Page title: 404 File Not Found <html><head><title>404 File Not Found</title></head> <body>The requested URL was not found on this server</body></html>
Open service 24.133.105.47:80
2024-09-07 21:10
HTTP/1.0 200 OK Content-type: application/binary Server: uc-httpd 1.0.0 Expires: 0 Page title: 404 File Not Found <html><head><title>404 File Not Found</title></head> <body>The requested URL was not found on this server</body></html>
Open service 24.133.105.47:80
2024-08-25 20:47
HTTP/1.0 200 OK Content-type: application/binary Server: uc-httpd 1.0.0 Expires: 0 Page title: 404 File Not Found <html><head><title>404 File Not Found</title></head> <body>The requested URL was not found on this server</body></html>
Open service 24.133.105.47:80
2024-08-17 21:07
HTTP/1.0 200 OK Content-type: text/html Server: uc-httpd 1.0.0 Expires: 0 Page title: NEUTRON <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" > <title>NEUTRON</title> <link rel="stylesheet" type="text/css" media="screen" href="m.css" /> <!-- m.js --> <script type="text/javascript" language="JavaScript"> if(navigator.userAgent.indexOf('IE') < 0) { var userAgent = navigator.userAgent, rMsie = /(msie\s|trident.*rv:)([\w.]+)/, rFirefox = /(firefox)\/([\w.]+)/, rOpera = /(opera).+version\/([\w.]+)/, rChrome = /(chrome)\/([\w.]+)/, rSafari = /version\/([\w.]+).*(safari)/; var browserMatch = uaMatch(userAgent.toLowerCase()); if(browserMatch.browser!="IE") { location="Login.htm"; } } function uaMatch(ua) { var match = rMsie.exec(ua); if (match != null) { return { browser : "IE", version : match[2] || "0" }; } var match = rFirefox.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rOpera.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rChrome.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rSafari.exec(ua); if (match != null) { return { browser : match[2] || "", version : match[1] || "0" }; } if (match != null) { return { browser : "", version : "0" }; } } </script> <script type="text/javascript" src="m.jsp"></script> <script type="text/javascript" > var ipaddress =document.location.hostname; var hostport=34567; var iLanguage=110; if (ipaddress == "") { ipaddress = "10.10.36.152"; // ipaddress = "10.2.4.55"; } </script> <!-- 原始函数 --> <script> var gExitChannel=new Array(); var gExitSubType=new Array(); var gexiti; var gcid=-1; var g_channelNum=4; var gsld; var gslda; var gsldb; var gsldc; var gsldd; var gfmu1=0; var gfmu2=0; var gfmu3=0; var g_bRecord=false; var g_bRealPlay=false; var g_bAudio=false; var g_bQS=false; var g_bSubQS1=true; var g_bSubQS2=true; var g_bSubQS3=true; var g_bSubQS4=false; var g_strSubQS4Name = ''; var g_bClose=false; var gHashCookie = new Hash.Cookie('NetSuveillanceWebCookie',{duration: 30}); var settings = { username:'' } var gca=0; var gcb=0; var gcc=0; var gcd=0; var gAutoPlayAll=false; var gdomready=0; var gopenall=0; var gsld; //var gslde; var gwid=0; var gcid=-1; var gptz=0; var gxh=0; var gxz=0; var gxs=0; var gxj=0; var gdj=0; var gdg=0; var gfmu1=0; var gfmnudj=0; var gomnudj=null; var gwid=0; var i=0; var j=0; var glhight=0; var grhight=287; function ld() { gexiti=0; gExitChannel[0]=0; gExitSubType[0]=true; var username = $("username").value; var password = $("password").value; var r=ocx.Login(ipaddress,hostport,username,password); if (r>0 ){ // resize(); getcl(); timeup(2); $('password').value=""; $('l').style.display="none"; $('m').style.top="0px"; settings['username'] = username; savesetting(); if(gAutoPlayAll) { ocx.PlayAll(); } g_bClose=false; } } function lo() { $('QS').style.display='none'; g_bClose=true; if (ocx.Logout()>=0) { loeft(); } } function loeft() { $('m').style.top="-10000px"; $('l
Open service 24.133.105.47:80
2024-08-15 19:51
HTTP/1.0 200 OK Content-type: text/html Server: uc-httpd 1.0.0 Expires: 0 Page title: NEUTRON <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" > <title>NEUTRON</title> <link rel="stylesheet" type="text/css" media="screen" href="m.css" /> <!-- m.js --> <script type="text/javascript" language="JavaScript"> if(navigator.userAgent.indexOf('IE') < 0) { var userAgent = navigator.userAgent, rMsie = /(msie\s|trident.*rv:)([\w.]+)/, rFirefox = /(firefox)\/([\w.]+)/, rOpera = /(opera).+version\/([\w.]+)/, rChrome = /(chrome)\/([\w.]+)/, rSafari = /version\/([\w.]+).*(safari)/; var browserMatch = uaMatch(userAgent.toLowerCase()); if(browserMatch.browser!="IE") { location="Login.htm"; } } function uaMatch(ua) { var match = rMsie.exec(ua); if (match != null) { return { browser : "IE", version : match[2] || "0" }; } var match = rFirefox.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rOpera.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rChrome.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rSafari.exec(ua); if (match != null) { return { browser : match[2] || "", version : match[1] || "0" }; } if (match != null) { return { browser : "", version : "0" }; } } </script> <script type="text/javascript" src="m.jsp"></script> <script type="text/javascript" > var ipaddress =document.location.hostname; var hostport=34567; var iLanguage=110; if (ipaddress == "") { ipaddress = "10.10.36.152"; // ipaddress = "10.2.4.55"; } </script> <!-- 原始函数 --> <script> var gExitChannel=new Array(); var gExitSubType=new Array(); var gexiti; var gcid=-1; var g_channelNum=4; var gsld; var gslda; var gsldb; var gsldc; var gsldd; var gfmu1=0; var gfmu2=0; var gfmu3=0; var g_bRecord=false; var g_bRealPlay=false; var g_bAudio=false; var g_bQS=false; var g_bSubQS1=true; var g_bSubQS2=true; var g_bSubQS3=true; var g_bSubQS4=false; var g_strSubQS4Name = ''; var g_bClose=false; var gHashCookie = new Hash.Cookie('NetSuveillanceWebCookie',{duration: 30}); var settings = { username:'' } var gca=0; var gcb=0; var gcc=0; var gcd=0; var gAutoPlayAll=false; var gdomready=0; var gopenall=0; var gsld; //var gslde; var gwid=0; var gcid=-1; var gptz=0; var gxh=0; var gxz=0; var gxs=0; var gxj=0; var gdj=0; var gdg=0; var gfmu1=0; var gfmnudj=0; var gomnudj=null; var gwid=0; var i=0; var j=0; var glhight=0; var grhight=287; function ld() { gexiti=0; gExitChannel[0]=0; gExitSubType[0]=true; var username = $("username").value; var password = $("password").value; var r=ocx.Login(ipaddress,hostport,username,password); if (r>0 ){ // resize(); getcl(); timeup(2); $('password').value=""; $('l').style.display="none"; $('m').style.top="0px"; settings['username'] = username; savesetting(); if(gAutoPlayAll) { ocx.PlayAll(); } g_bClose=false; } } function lo() { $('QS').style.display='none'; g_bClose=true; if (ocx.Logout()>=0) { loeft(); } } function loeft() { $('m').style.top="-10000px"; $('l
Open service 24.133.105.47:80
2024-08-13 20:58
HTTP/1.0 200 OK Content-type: text/html Server: uc-httpd 1.0.0 Expires: 0 Page title: NEUTRON <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" > <title>NEUTRON</title> <link rel="stylesheet" type="text/css" media="screen" href="m.css" /> <!-- m.js --> <script type="text/javascript" language="JavaScript"> if(navigator.userAgent.indexOf('IE') < 0) { var userAgent = navigator.userAgent, rMsie = /(msie\s|trident.*rv:)([\w.]+)/, rFirefox = /(firefox)\/([\w.]+)/, rOpera = /(opera).+version\/([\w.]+)/, rChrome = /(chrome)\/([\w.]+)/, rSafari = /version\/([\w.]+).*(safari)/; var browserMatch = uaMatch(userAgent.toLowerCase()); if(browserMatch.browser!="IE") { location="Login.htm"; } } function uaMatch(ua) { var match = rMsie.exec(ua); if (match != null) { return { browser : "IE", version : match[2] || "0" }; } var match = rFirefox.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rOpera.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rChrome.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rSafari.exec(ua); if (match != null) { return { browser : match[2] || "", version : match[1] || "0" }; } if (match != null) { return { browser : "", version : "0" }; } } </script> <script type="text/javascript" src="m.jsp"></script> <script type="text/javascript" > var ipaddress =document.location.hostname; var hostport=34567; var iLanguage=110; if (ipaddress == "") { ipaddress = "10.10.36.152"; // ipaddress = "10.2.4.55"; } </script> <!-- 原始函数 --> <script> var gExitChannel=new Array(); var gExitSubType=new Array(); var gexiti; var gcid=-1; var g_channelNum=4; var gsld; var gslda; var gsldb; var gsldc; var gsldd; var gfmu1=0; var gfmu2=0; var gfmu3=0; var g_bRecord=false; var g_bRealPlay=false; var g_bAudio=false; var g_bQS=false; var g_bSubQS1=true; var g_bSubQS2=true; var g_bSubQS3=true; var g_bSubQS4=false; var g_strSubQS4Name = ''; var g_bClose=false; var gHashCookie = new Hash.Cookie('NetSuveillanceWebCookie',{duration: 30}); var settings = { username:'' } var gca=0; var gcb=0; var gcc=0; var gcd=0; var gAutoPlayAll=false; var gdomready=0; var gopenall=0; var gsld; //var gslde; var gwid=0; var gcid=-1; var gptz=0; var gxh=0; var gxz=0; var gxs=0; var gxj=0; var gdj=0; var gdg=0; var gfmu1=0; var gfmnudj=0; var gomnudj=null; var gwid=0; var i=0; var j=0; var glhight=0; var grhight=287; function ld() { gexiti=0; gExitChannel[0]=0; gExitSubType[0]=true; var username = $("username").value; var password = $("password").value; var r=ocx.Login(ipaddress,hostport,username,password); if (r>0 ){ // resize(); getcl(); timeup(2); $('password').value=""; $('l').style.display="none"; $('m').style.top="0px"; settings['username'] = username; savesetting(); if(gAutoPlayAll) { ocx.PlayAll(); } g_bClose=false; } } function lo() { $('QS').style.display='none'; g_bClose=true; if (ocx.Logout()>=0) { loeft(); } } function loeft() { $('m').style.top="-10000px"; $('l
Open service 24.133.105.47:80
2024-08-11 21:08
HTTP/1.0 200 OK Content-type: text/html Server: uc-httpd 1.0.0 Expires: 0 Page title: NEUTRON <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" > <title>NEUTRON</title> <link rel="stylesheet" type="text/css" media="screen" href="m.css" /> <!-- m.js --> <script type="text/javascript" language="JavaScript"> if(navigator.userAgent.indexOf('IE') < 0) { var userAgent = navigator.userAgent, rMsie = /(msie\s|trident.*rv:)([\w.]+)/, rFirefox = /(firefox)\/([\w.]+)/, rOpera = /(opera).+version\/([\w.]+)/, rChrome = /(chrome)\/([\w.]+)/, rSafari = /version\/([\w.]+).*(safari)/; var browserMatch = uaMatch(userAgent.toLowerCase()); if(browserMatch.browser!="IE") { location="Login.htm"; } } function uaMatch(ua) { var match = rMsie.exec(ua); if (match != null) { return { browser : "IE", version : match[2] || "0" }; } var match = rFirefox.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rOpera.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rChrome.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rSafari.exec(ua); if (match != null) { return { browser : match[2] || "", version : match[1] || "0" }; } if (match != null) { return { browser : "", version : "0" }; } } </script> <script type="text/javascript" src="m.jsp"></script> <script type="text/javascript" > var ipaddress =document.location.hostname; var hostport=34567; var iLanguage=110; if (ipaddress == "") { ipaddress = "10.10.36.152"; // ipaddress = "10.2.4.55"; } </script> <!-- 原始函数 --> <script> var gExitChannel=new Array(); var gExitSubType=new Array(); var gexiti; var gcid=-1; var g_channelNum=4; var gsld; var gslda; var gsldb; var gsldc; var gsldd; var gfmu1=0; var gfmu2=0; var gfmu3=0; var g_bRecord=false; var g_bRealPlay=false; var g_bAudio=false; var g_bQS=false; var g_bSubQS1=true; var g_bSubQS2=true; var g_bSubQS3=true; var g_bSubQS4=false; var g_strSubQS4Name = ''; var g_bClose=false; var gHashCookie = new Hash.Cookie('NetSuveillanceWebCookie',{duration: 30}); var settings = { username:'' } var gca=0; var gcb=0; var gcc=0; var gcd=0; var gAutoPlayAll=false; var gdomready=0; var gopenall=0; var gsld; //var gslde; var gwid=0; var gcid=-1; var gptz=0; var gxh=0; var gxz=0; var gxs=0; var gxj=0; var gdj=0; var gdg=0; var gfmu1=0; var gfmnudj=0; var gomnudj=null; var gwid=0; var i=0; var j=0; var glhight=0; var grhight=287; function ld() { gexiti=0; gExitChannel[0]=0; gExitSubType[0]=true; var username = $("username").value; var password = $("password").value; var r=ocx.Login(ipaddress,hostport,username,password); if (r>0 ){ // resize(); getcl(); timeup(2); $('password').value=""; $('l').style.display="none"; $('m').style.top="0px"; settings['username'] = username; savesetting(); if(gAutoPlayAll) { ocx.PlayAll(); } g_bClose=false; } } function lo() { $('QS').style.display='none'; g_bClose=true; if (ocx.Logout()>=0) { loeft(); } } function loeft() { $('m').style.top="-10000px"; $('l
Open service 24.133.105.47:80
2024-08-07 23:39
HTTP/1.0 200 OK Content-type: text/html Server: uc-httpd 1.0.0 Expires: 0 Page title: NEUTRON <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" > <title>NEUTRON</title> <link rel="stylesheet" type="text/css" media="screen" href="m.css" /> <!-- m.js --> <script type="text/javascript" language="JavaScript"> if(navigator.userAgent.indexOf('IE') < 0) { var userAgent = navigator.userAgent, rMsie = /(msie\s|trident.*rv:)([\w.]+)/, rFirefox = /(firefox)\/([\w.]+)/, rOpera = /(opera).+version\/([\w.]+)/, rChrome = /(chrome)\/([\w.]+)/, rSafari = /version\/([\w.]+).*(safari)/; var browserMatch = uaMatch(userAgent.toLowerCase()); if(browserMatch.browser!="IE") { location="Login.htm"; } } function uaMatch(ua) { var match = rMsie.exec(ua); if (match != null) { return { browser : "IE", version : match[2] || "0" }; } var match = rFirefox.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rOpera.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rChrome.exec(ua); if (match != null) { return { browser : match[1] || "", version : match[2] || "0" }; } var match = rSafari.exec(ua); if (match != null) { return { browser : match[2] || "", version : match[1] || "0" }; } if (match != null) { return { browser : "", version : "0" }; } } </script> <script type="text/javascript" src="m.jsp"></script> <script type="text/javascript" > var ipaddress =document.location.hostname; var hostport=34567; var iLanguage=110; if (ipaddress == "") { ipaddress = "10.10.36.152"; // ipaddress = "10.2.4.55"; } </script> <!-- 原始函数 --> <script> var gExitChannel=new Array(); var gExitSubType=new Array(); var gexiti; var gcid=-1; var g_channelNum=4; var gsld; var gslda; var gsldb; var gsldc; var gsldd; var gfmu1=0; var gfmu2=0; var gfmu3=0; var g_bRecord=false; var g_bRealPlay=false; var g_bAudio=false; var g_bQS=false; var g_bSubQS1=true; var g_bSubQS2=true; var g_bSubQS3=true; var g_bSubQS4=false; var g_strSubQS4Name = ''; var g_bClose=false; var gHashCookie = new Hash.Cookie('NetSuveillanceWebCookie',{duration: 30}); var settings = { username:'' } var gca=0; var gcb=0; var gcc=0; var gcd=0; var gAutoPlayAll=false; var gdomready=0; var gopenall=0; var gsld; //var gslde; var gwid=0; var gcid=-1; var gptz=0; var gxh=0; var gxz=0; var gxs=0; var gxj=0; var gdj=0; var gdg=0; var gfmu1=0; var gfmnudj=0; var gomnudj=null; var gwid=0; var i=0; var j=0; var glhight=0; var grhight=287; function ld() { gexiti=0; gExitChannel[0]=0; gExitSubType[0]=true; var username = $("username").value; var password = $("password").value; var r=ocx.Login(ipaddress,hostport,username,password); if (r>0 ){ // resize(); getcl(); timeup(2); $('password').value=""; $('l').style.display="none"; $('m').style.top="0px"; settings['username'] = username; savesetting(); if(gAutoPlayAll) { ocx.PlayAll(); } g_bClose=false; } } function lo() { $('QS').style.display='none'; g_bClose=true; if (ocx.Logout()>=0) { loeft(); } } function loeft() { $('m').style.top="-10000px"; $('l