CVE-2012-2560

Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001.

• CWE-22

• http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdfUS Government Resource
• http://www.wellintech.com/index.php/news/33-patch-for-kingview653Patch, Vendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdfUS Government Resource
• http://www.wellintech.com/index.php/news/33-patch-for-kingview653Patch, Vendor Advisory

Published

Jul 5, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2553Use-after-free vulnerability in win32k.sys in the kernel-mod…
• CVE-2012-2554Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-2555Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-2556The OpenType Font (OTF) driver in the kernel-mode drivers in…
• CVE-2012-2557Use-after-free vulnerability in Microsoft Internet Explorer …
• CVE-2012-2559WellinTech KingHistorian 3.0 allows remote attackers to exec…
• CVE-2012-2561HP Business Service Management (BSM) 9.12 does not properly …
• CVE-2012-2562The Xelex MobileTrack application 2.3.7 and earlier for Andr…
• CVE-2012-2563Multiple cross-site scripting (XSS) vulnerabilities in Bloxx…
• CVE-2012-2564Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2012-2565Bloxx Web Filtering before 5.0.14 does not use a salt during…
• CVE-2012-2566Bloxx Web Filtering before 5.0.14 does not properly interpre…