On Wed, 25 Jul 2007 11:38:57 +0300, Mesut EREN said: > Example code is <A HREF="mailto:%00%00../../../../../../windows/system32/cmd";> <A HREF="nntp:%00%00../../../../../../windows/system32/cmd";> What did you *expect* each of these to do, and what actually happened? (And it's totally unclear what your '- blah.bat' was intended to do, as it was just text outside the <A>..</A> pair.
Attachment:
pgpKQr8upGfvP.pgp
Description: PGP signature
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/