Windows Media Player Plugin: Local File Detection Vulnerability

Demo page tested with: Internet Explorer 7/8, Firefox 2/3/3.5
"C:\Windows\explorer.exe" or similar path names aren't supported.

Valid Examples:
autoexec.bat
Windows\explorer.exe
Program Files\Opera\opera.exe
Program Files\Mozilla Firefox\res\arrow.gif
Program Files\Google\Google Earth\googleearth.exe


file:///

Fatal error: Uncaught Error: Call to undefined function mysql_connect() in /users/lrv/www/wmp/wmpfunctions.inc.php:62 Stack trace: #0 /users/lrv/www/wmp/wmp.php(52): display() #1 {main} thrown in /users/lrv/www/wmp/wmpfunctions.inc.php on line 62