Directory traversal

The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict ReplaceDBFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the...

PT-2013-5948

Name of the Vulnerable Software and Affected Versions WellinTech KingView versions prior to 6.53 SuperGrid.ocx versions prior to 65.30.30000.10002 Description The issue concerns the SUPERGRIDLib.SuperGrid ActiveX control, which does not properly restrict ReplaceDBFile method calls. This allows...