0day GP-Pro EX HMI WinGP Runtime Arbitrary File Upload
GP-Pro EX HMI WinGP Runtime Arbitrary File Upload
vendor: http://www.profaceamerica.com
Length of filepath is limited. So this module creates executable trojan at root folder of WinGP. User interaction is required.
Tested against WinGP Runtime 4.8.0 on Windows 7 SP1 x64.