medium5.0Public exploit code
CVE-2002-1688
The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authent…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 5.5/6.0 - History List Script Injection2002-04-15 · remote · windows · Verified
Impact
The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authentication information via cookies by injecting JavaScript into the URL, which is executed when the user hits the Back button.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 5.5, 6.0 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/267561
- http://www.securityfocus.com/bid/4505
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8844
- http://online.securityfocus.com/archive/1/267561
- http://www.securityfocus.com/bid/4505
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8844