exploit/windows/browser/notes_handler_cmdinject

weaponized

IBM Lotus Notes Client URL Handler Command Injection

view exploit source metasploittype exploitpublished 2012-06-18catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-2174US	high9.3	38.8% (99th)	Exploit	2012-06-20
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.