Microsoft Internet Explorer executable files download filter protection bypass
Published:		15.10.2007
Source:		BUGTRAQ
SecurityVulns ID:		8255
Type:		client
Level:		4/10
Description:		It's possible to upload file to temporary internet files folder by adding GET parameters to filename, e.g. http://example.com/program.exe?1.cda/

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document

laurent gaffie, playing for fun with <=IE7 (15.10.2007)

Discuss:

Read or add your comments to this news (0 comments)