CVE-2001-0089

Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability.

Score

CVSS 2.0 2.6 Low

Status

Modified - cve@mitre.org

Published

2001-02-16

Last modified

2024-08-08

Affected products

• Internet Explorer (Microsoft)

References

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5615