> On Thu, Dec 11, 2003 at 10:26:06AM -0500, Funk Jr, Joseph C. wrote: > > Works fine for me same version IE6.0.2800.1106.xpsp2. > Sends me to https://paypal.com Although I did notice that > the <button> seems to be a requirement for this vulnerability > to work, as using a plain hyperlink <a href> fails for me. > > > Try this one: > http://petard.freeshell.org/ms-announce.html
displayed as "http://[EMAIL PROTECTED]/" in the latest Firebird 0.7+ nightly. displayed as "http://[EMAIL PROTECTED]/" in Opera 7.23 AFTER getting a warning about going to an URL which includes a username. displayed as "http://[EMAIL PROTECTED]/" in Avant Browser 8.02 Build 207 displayed as "http://www.microsoft.com"; in IE 6.0.2800.1106 all are on W2k Pro SP4 et al. -d _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
