EIP-2026-117417

This exploit leverages an insecure ActiveX method in LiquidXML Studio 2010 to create and execute an HTA file in the Startup folder, achieving arbitrary code execution via WScript.Shell. The PoC demonstrates file write and command execution through the ActiveX control's OpenFile and AppendString methods.