CVE-2008-6936

This exploit leverages a vulnerability in Exodus v0.10 to achieve remote code execution by overwriting a file in the Microsoft Help and Support Center folder via the '-l' argument. The exploit uses a crafted HTML file with malicious links to trigger the vulnerability and execute arbitrary VBScript code.

The exploit demonstrates arbitrary parameter injection in Exodus v0.10 via a URI handler vulnerability. It leverages the 'im://' protocol handler to inject command-line arguments, enabling file overwrites or crashes.