CVE-2001-0089 Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability.
LowCVSS 2.6
EPSS 14.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | <= 5.5 | No fix listed |
| Microsoft internet explorer | = 5.0 | No fix listed |
| Microsoft internet explorer | = 5.01 | No fix listed |
References
- MS00-093 vendor-advisory
- ie-form-file-upload(5615) vdb-entry