Lucene search
IcscertCVELIST:CVE-2013-6127HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-6127
2022-10-0316:14:52
icscert
www.cve.org
2
activex control
supergrid.ocx
vulnerability
remote attackers
arbitrary files
arbitrary programs
directory traversal attack
The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict ReplaceDBFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the two pathname arguments, as demonstrated by a directory traversal attack.
Related
cve
cve
CVE-2013-6127
2022-10-03 16:14:52
prion
prion
Directory traversal
2013-10-25 20:55:00
d2
d2
DSquare Exploit Pack: D2SEC_KINGVIEW
2013-10-25 20:55:00
nvd
nvd
CVE-2013-6127
2013-10-25 20:55:03
ics
ics
WellinTech KingView ActiveX Vulnerabilities
2013-12-17 12:00:00