> The next problem would be, how can we make the client side reload this
> page automatically? There would be several ways to accomplish. It will
> work with JavaScript, but it 'might' also work if the document expiry
> date is specified.
Creating a working exploit that can be remotely loaded isn't difficult.
I sent Paul one on Monday and he called me about his version yesterday.
He is considering releasing it here.
John