PT-2014-4655

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 7.2 Description The issue allows remote attackers to read arbitrary files via a crafted call to the ChkCookie subroutine in an ActiveX control. This is due to a flaw in the broadweb/include/gChkCook.asp...