mozilla -- automated file upload

2004-04-28T00:00:00
ID 6E740881-0CAE-11D9-8A8A-000C41E2CDAD
Type freebsd
Reporter FreeBSD
Modified 2004-09-26T00:00:00

Description

A malicious web page can cause an automated file upload from the victim's machine when viewed with Mozilla with Javascript enabled. This is due to a bug permitting default values for type="file" <input> elements in certain situations.