• info
• discussion
• exploit
• solution
• references

Microsoft Internet Explorer XmlHttpRequest Parameter Validation Weakness

Proof-of-concept examples are available in the attached research report by Amit Klein.