OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: [Full-Disclosure] internet-explorer: bug or feature?

From: Aditya, ALD [Aditya Lalit Deshmukh] (aditya.deshmukhonline.gateway.technolabs.net)
Date: Thu Apr 01 2004 - 04:16:36 CST


> ie shows me a page with the content 'mooh' and when i call
>
> about:<script>alert('*plopp*');</script>
>
> a small alert popps up and says me '*plopp*', so it seems, that i can

this is a local zone for ie if you can manage to script it then you could 0wn other people without too much effort

-aditya

________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html