EUVD-2013-1661

Malware in sbrugna...

CVE-2013-1627

Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub401A90 CreateFileW function...

Path traversal

Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub401A90 CreateFileW function...

CVE-2013-1627

The CVE-2013-1627 entry describes a directory traversal (CWE-22) in NTWebServer.exe used by Indusoft Studio 7.0 and Advantech Studio 7.0 and earlier. The vulnerability allows remote attackers to read arbitrary files by supplying a full pathname to the sub_401A90 CreateFileW call, enabling potenti...

CVE-2013-1627

Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub401A90 CreateFileW function...

CVE-2013-1627: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub401A90 CreateFileW function...