• info
• discussion
• exploit
• solution
• references

Mozilla Firefox OnKeyDown Event File Upload Vulnerability

A proof of concept is available at the following location:

http://yathong.googlepages.com/FirefoxFocusBug.html