Microsoft Windows MSHTA.EXE .HTA File XML Injection

Microsoft Windows mshta.exe allows processing of XML external entities which can result in local data-theft and or program reconnaissance upon opening specially crafted HTA files.

Leave a Reply