CVE-2001-0089 EXPLOIT
2.6
LOW · CVSS 2.0 · EPSS 14.5% (pctl 97)
Patch early
A public exploit exists.
Description
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability.
Scoring
| CVSS | 2.6 (LOW, v2.0) |
|---|---|
| Vector | AV:N/AC:H/Au:N/C:P/I:N/A:N |
| EPSS | 14.47% — more likely to be exploited than 97% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2001-02-16 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | internet explorer |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Internet Explorer 5 - 'INPUT TYPE=FILE' Remote File Upload | 2000-12-01 |
References
→ the Explorer · watch your stack · NVD