{"uuid": "13515f98-ff27-4076-94cc-56219b70f776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1559", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/oracle_webcenter_checkoutandopen.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in the Oracle WebCenter Content\\n          CheckOutAndOpenControl ActiveX. This vulnerability exists in openWebdav(), where\\n          user controlled input is used to call ShellExecuteExW(). This module abuses the\\n          control to execute an arbitrary HTA from a remote location. This module has been\\n          tested successfully with the CheckOutAndOpenControl ActiveX installed with Oracle\\n          WebCenter Content 11.1.1.6.0.\", \"disclosure_date\": \"2013-04-16\", \"fullname\": \"exploit/windows/browser/oracle_webcenter_checkoutandopen\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/oracle_webcenter_checkoutandopen.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/browser/oracle_webcenter_checkoutandopen\", \"references\": [\"CVE-2013-1559\", \"OSVDB-92386\", \"BID-59122\", \"URL-http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html\", \"ZDI-13-094\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:13.093428Z"}