Behrooz_Ice
03-08-2004, 10:54 PM
The code below is used for loading a URL into the HTML content area of the Media Bar window.open("[Only registered and activated users can see links]","_media") And javascript also can be injected: window.open("javascript:alert(location.href)","_media") in my computer,the code above will show me a MsgBox says 'res://C:\WINDOWS\SYSTEM\BROWSELC.DLL/mbLoading.htm' it suggests you that it's executed in My Computer Zone. We can also inject a code to the Media Bar which has connected to a website. As Media Bar ,Search Bar has the same vuln. Enjoy IT!