Microsoft Internet Explorer 5 - Classic Mode FTP Client Cross Domain Scripting

2003-06-04T00:00:00
ID EXPLOITPACK:57D9F5E09AEC659FC5EB247768811680
Type exploitpack
Reporter Matthew Murphy
Modified 2003-06-04T00:00:00

Description

Microsoft Internet Explorer 5 - Classic Mode FTP Client Cross Domain Scripting

                                        
                                            source: https://www.securityfocus.com/bid/7810/info

The Microsoft Internet Explorer FTP indexing implementation could allow script code to be executed in the security zone of another FTP site. This vulnerability only exists when Internet Explorer FTP is used in "Classic Mode".

Any script would be executed with the permissions of the user running Internet Explorer. 

ftp://%3cimg%20src%3d%22%22%20onerror%3d%22alert%28document%2eURL%29%22%3e.example.com/