Home / exploits firefox-check.txt
Posted on 21 October 2008
########################################################### # Mozilla Firefox 3.0.1, # # file type check vulnerability # # when browsing through ftp. # ########################################################### # For example, when browsing: # # ftp://ftp.example.net/picture.jpg # # or it could be .txt, .pdf, etc... # # Mozilla Firefox does not check the file type. # # # # When browsing only ftp://ftp.example.net/ # # you will see the picture.jpg file, like any other # # image file, with icons and such :) # ########################################################### Example content of the picture.jpg file: /Begin: <html> <body> <script>alert('You are Pwned!');</script> </body> </html> End\n
