CVE-2008-4728

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

31.63%

Published

Oct 23, 2008

Modified

Apr 22, 2026

Public PoC / Exploit (4)

All weaponized →

Exploit-DBHummingbird Deployment Wizard 2008 - ActiveX Command Execution Exploit-DBHummingbird Deployment Wizard 2008 - ActiveX File Execution(2)Exploit-DBHummingbird Deployment Wizard 2008 - Registry Values Creation/Change TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders.

Affected Products (1)

hummingbird · deployment_wizardvulnerable

References (20)

http://secunia.com/advisories/32337

Vendor Advisory

http://www.securityfocus.com/bid/31799

http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html

ExploitURL Repurposed

http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html

ExploitURL Repurposed

http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html

ExploitURL Repurposed