2.6low
CVE-2001-00891 exploit
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML for…
Published 25 y ago · modified 4 mo ago · JSON
CVSS
2.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
14.5%
percentile 97%
Public exploits
1
Exploit-DB
Summary
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability.
Exploit prediction (EPSS)
14.47% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.
Exploits and detections
- EDB-20459 Microsoft Internet Explorer 5 - 'INPUT TYPE=FILE' Remote File Upload · remote · 2000-12-01
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 2.6 | AV:N/AC:H/Au:N/C:P/I:N/A:N |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/5615 · vdb-entry, x_refsource_XF, x_transferred
- docs.microsoft.com /en-us/security-updates/securitybulletins/2000/ms00-093 · vendor-advisory, x_refsource_MS, x_transferred
Sources
- CVE List: CVE-2001-0089
- NVD: CVE-2001-0089
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.