Internet Explorer will accept %0a and %0d in URLs. In FTP URLs, it will accept them in the username part of the URL. Due to the similarity between the FTP and SMTP protocols, this can be used to send mail.
ee66b2e6d49b546793170520a819053e
© 2012 Packet Storm. All rights reserved.