EIP-2026-118842

This exploit leverages a cross-zone scripting vulnerability in Microsoft Internet Explorer 6 and above, allowing execution of arbitrary script code in the context of the My Computer Zone via the '_media' property of the 'window.open' method. It demonstrates file creation and cross-site scripting (XSS) by injecting malicious JavaScript.