CVE-1999-0877

Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME...

EUVD-2009-5113

Malware in sbrugna...

EUVD-1999-0820

Malware in sbrugna...

EUVD-1999-0970

Malware in sbrugna...

CVE-2009-5159

Invision Power Board aka IPB or IP.Board 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment...

Design/Logic Flaw

Invision Power Board aka IPB or IP.Board 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment...

PT-2020-7071

Name of the Vulnerable Software and Affected Versions Invision Power Board aka IPB or IP.Board versions 2.x through 3.0.4 Description The issue allows for cross-site scripting XSS via a .txt attachment when Internet Explorer 5 is used. Recommendations For Invision Power Board aka IPB or IP.Board...

CVE-2009-5159: Improper Neutralization of Input During Web Page Generation

Invision Power Board aka IPB or IP.Board 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment...

Microsoft Internet Explorer 5 \'INPUT TYPE=FILE\' Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2045/info One of the ways users submit information to remote websites is through the INPUT type form options. Users can upload files to remote webservers with the input type=FILE option. Due to a design error in the...

CVE-2008-1368: Improper Control of Generation of Code

CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded CRLF %0D%0A before the FTP command, which causes the commands to be inserted into an authenticated FTP connection established...

CVE-1999-1577: Undefined Security Weakness

Buffer overflow in HHOpen ActiveX control hhopen.ocx 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method...

CVE-2003-1041: Undefined Security Weakness

Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." dot dot sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension. NOTE: this bug ma...

CVE-2003-0519: Undefined Security Weakness

Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service freeze via a URL to C:\aux MS-DOS device name and possibly other devices...

Microsoft Internet Explorer - Object Tag (MS03-020)

Microsoft Internet Explorer - Object Tag MS03-020 !/usr/bin/perl Proof of concept exploit on IE 5.x - 6.x by Alumni IE-Object longtype dynamic call oferflow url:// the flaw actually exists in URLMON.DLL when converting backslashes to wide char, this can be seen on stack dump near...

DHTML Edit Control for IE5 allows local files to be uploaded to web server

Overview A vulnerability exists in the DHTML Edit Control for IE5 that allows arbitrary local files to be uploaded to a web server. Description DHTML Edit is an activex control that is marked safe-for-scripting. This control can be embedded in a website, and permit local files to be remotely...

CVE-2002-0832: Undefined Security Weakness

Internet Explorer 5, 5.6, and 6 allows remote attackers to bypass cookie privacy settings and store information across browser sessions via the userData storeuserData feature...

CVE-2002-0269: Undefined Security Weakness

Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent...

Microsoft Internet Explorer 5 - Cascading Style Sheet File Disclosure (MS02-023)

Microsoft Internet Explorer 5 - Cascading Style Sheet File Disclosure MS02-023 source: https://www.securityfocus.com/bid/4411/info The Cascading Style-Sheets CSS interpreter for Microsoft Internet Explorer is prone to an issue which may allow an attacker to read the contents of files on a web...

CVE-2000-0662

The CVE-2000-0662 entry describes a vulnerability in Internet Explorer 5.x and Microsoft Outlook where remote attackers can read arbitrary files by redirecting the contents of an IFRAME via the DHTML Edit Control (DHTMLED). The root cause is tied to the DHTMLED component handling dynamic HTML/IFR...

CVE-2000-0662: Undefined Security Weakness

Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Control DHTMLED...