said by SnowyOne :

I'm not convinced that input boxes could load & a form submit action can happen with what I've seen from the exploit sample page.

said by Sparrow :

With IE settings locked down (Security and Privacy set to High) nothing happens and the address remains: ht*tp://secunia.com/Internet_Explorer_Address_Bar_Spoofing_Vulnerability_Test/

IE6 - XP SP2

said by ZOverLord :

What are you talking about, this exploit is based on a timer flaw, nothing to do with input boxes or form submit.

said by SnowyOne :

That's correct. As far as a phish is concerned it is all about input boxes & form submits which I'm not convinced can happen with this exploit.

function openWin(url)
{
  window.open(url, 'window');
}

function StartTest()
{
  openWin('»www.google.com/');

  setTimeout("openWin('/19521_swf/?" + Math.random() + "');", 300);

  setTimeout("openWin('/19521_swf_result/');", 2500);
}

said by ZOverLord :

Did you click on the "Test Now - Left Click On This Link" under "Start The Test" on the page?

said by SnowyOne :

I'ts very clear that the 'exploit' does not use any input/submit actions. To put it another way, do you believe a phish could load a fake page with a CC# input box, have that box filled out & then submitted elsewhere all the while the page is loading?

said by ZOverLord :

Did you click on the "Test Now - Left Click On This Link" under "Start The Test" on the page?

Test Page Link again here: »secunia.com/Internet_Explorer_Ad···ty_Test/

said by ZOverLord :

Interesting, and you never see Google even flash in the browser window itself?