CVE-2002-0648 in Internet Explorerinfo

Summary

The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Disclosure

09/24/2002

Entries

2

CPE

ready

Exploit

Download

CVSS

5.3

EPSS

0.59276

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2002-0648
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2002-0648
CVE Detailshttps://www.cvedetails.com/cve/CVE-2002-0648/

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!