CVE-2006-1729

Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by 1 inserting the target filename into a text box, then turning that box into a file upload control, or 2 changing the type of the...

Microsoft Security Bulletin MS03-015: Cumulative Patch for Internet Explorer (813489)

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Cumulative Patch for Internet Explorer 813489 Date: 23 April 2003 Software: Microsoft c Internet Explorer Impact: Run code of the attacker's choice on a user's machine. Max Risk: Critic...

CVE-1999-0489

CVE-1999-0489 affects MSHTML.DLL in Internet Explorer 5.0. It allows a remote attacker to paste a file name into the file upload intrinsic control (variant of “untrusted scripted paste” per MS:MS98-013).

CVE-1999-0870

Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste...