low2.6Public exploit code
CVE-2001-0089
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 5 - 'INPUT TYPE=FILE' Remote File Upload2000-12-01 · remote · windows · Verified
Impact
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | through 5.5 Versions 5.0, 5.01 |
References
- NVD record
- CVE.org record
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5615
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5615