CVE-2008-6937

This exploit leverages a vulnerability in Exodus v0.10 to achieve remote code execution by overwriting a file in the Microsoft Help and Support Center folder via the '-l' argument. The exploit uses a crafted HTML file with malicious links to trigger the vulnerability and execute arbitrary VBScript code.

This exploit leverages a URI handler vulnerability in Exodus v0.10 to inject arbitrary command-line parameters, allowing file overwrites and potential DoS via malformed URIs. The PoC demonstrates how the 'im://' URI scheme can be abused to manipulate the application's behavior.