Path Traversal in Wellintech Kingview
CVE-2013-6127
The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict ReplaceDBFile method calls, which allows remote attackers to create or overwrite arbitrary f…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.042 (89.0th percentile) — read the EPSS interpretation.
Affected products
- Wellintech Kingview — versions 3.0, 6.52
- N/a — versions n/a
Weakness classification (CWE)
References
- 28084 (Exploit, exploit, x_refsource_EXPLOIT-DB)
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)