Lucene search
PRIOn knowledge basePRION:CVE-2013-6127HistoryOct 25, 2013 - 8:55 p.m.
Directory traversal
2013-10-2520:55:00
PRIOn knowledge base
www.prio-n.com
1
The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict ReplaceDBFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the two pathname arguments, as demonstrated by a directory traversal attack.
Related
cve
cve
CVE-2013-6127
2022-10-03 16:14:52
d2
d2
DSquare Exploit Pack: D2SEC_KINGVIEW
2013-10-25 20:55:00
nvd
nvd
CVE-2013-6127
2013-10-25 20:55:03
cvelist
cvelist
CVE-2013-6127
2022-10-03 16:14:52
ics
ics
WellinTech KingView ActiveX Vulnerabilities
2013-12-17 12:00:00