[prev in list] [next in list] [prev in thread] [next in thread] 

List:       vuln-dev
Subject:    app: protocol in Help Center and Support - allow run???!!!???
From:       Bartosz Kwitkowski <bartosz () wb ! pl>
Date:       2004-08-21 8:10:55
Message-ID: 20040821081055.16650.qmail () www ! securityfocus ! com
[Download RAW message or body]



In HCS is a protocol app: . When we use this protocol in HCS we can run local program without params.

EXAMPLE:
 
<a href="app:%WINDIR%\system32\cmd.exe"> calc </a>

Where we can find source of it?

C:\WINDOWS\PCHEALTH\HELPCTR\System\HomePage__DESKTOP.htm

Regards,
Bartosz
[prev in list] [next in list] [prev in thread] [next in thread]