RE: Writing to a local file without a warning

Hi Frank

I am pretty sure I have used the FSO (File System Object) to write to
text files from HTA applications, with no security warnings. Give that a
try

Regards
  Anton

-----Original Message-----
From: Frank Heyne [mailto:fh_at_rcs.urz.tu-dresden.de]
Sent: 28 March 2006 18:33
To: webappsec_at_securityfocus.com
Subject: Writing to a local file without a warning

Hello,

Question:
Is it possible to write a local file from a ht* file without the
interception of a warning or other dialog?

-------------------------------------------------------------------------
This List Sponsored by: SpiDynamics

ALERT: "How A Hacker Launches A Web Application Attack!"
Step-by-Step - SPI Dynamics White Paper
Learn how to defend against Web Application Attacks with real-world
examples of recent hacking methods such as: SQL Injection, Cross Site
Scripting and Parameter Manipulation

https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=701300000003gRl
--------------------------------------------------------------------------
Received on Mar 29 2006