Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: RE: IE7 SELECT Tag

RE: IE7 SELECT Tag

From: Damhuis Anton <DamhuisA_at_aforbes.co.za>
Date: Thu, 2 Nov 2006 09:33:40 +0200

Stupid question....

Is IE7 not more reliant on well formed HTML?
Maybe it expects the </option> tags.

Don't have IE7, so I can not check.

However it would still be a bug, either way.

Regards
  Anton

SIG: "Great opportunities to help others
      seldom come, but small ones surround
      us every day." - Sally Koch

-----Original Message-----
From: listbounce_at_securityfocus.com [mailto:listbounce_at_securityfocus.com]
On Behalf Of dan.ross_at_picbusiness.com
Sent: 31 October 2006 04:21 PM
To: vuln-dev_at_securityfocus.com
Subject: IE7 SELECT Tag

I just installed IE7 this morning, then promptly found my first bug.

Now, imagine instead of fruit, you're picking which bank account to
transfer money to/from...

Sample Code:
<html>
<body>
<B>Please choose one:</B> &nbsp;
<SELECT onchange=alert('hi') size=1 name=favorite> <OPTION value="">
<OPTION value=1>Apple <OPTION value=2>Banana <OPTION value=3
selected>Cashew <OPTION value=4>Orange </SELECT> </body> </html>

Confidentiality Warning
=======================

The contents of this e-mail and any accompanying documentation
are confidential and any use thereof, in what ever form, by anyone
other than the addressee is strictly prohibited.
Received on Nov 02 2006

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos