possible javascript exploits unprotected link?

on page website (one ours) i enter url following code:

javascript:createnewwindow('something', 100, 100, 'text')

is there proceed someone feat this?

function createnewwindow(url, widthin, heightin, title) 
        {
            var stroptions='toolbar=0,location=0,directories=0,status=1,menubar=0,scrollbars=1,resizable=1,width=' + widthin + ',height=' + heightin;
            var newwin = open( url,title,stroptions ); 
            newwin.focus();
        }