ALC WebCTRL i-Vu/SiteScan Web Unreferenced Search Path Vulnerability

ALC WebCTRL is the building automation platform. ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior versions suffer from an un-referenced search path vulnerability in their implementation, which allows an authenticated user to elevate privileges and execute arbitrary code on the system...