Vulnerabilities > CVE-2003-0114 - Unspecified vulnerability in Microsoft IE and Internet Explorer

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
microsoft
NVD
Published: 2003-05-12
Updated: 2021-07-23

Summary

The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the local system via a web page containing a script to upload the files.

Vulnerable Configurations

Part Description Count
Application
Microsoft
9

Oval

accepted2014-02-24T04:03:28.786-05:00
classvulnerability
contributors
  • nameTiffany Bergeron
    organizationThe MITRE Corporation
  • nameHarvey Rubinovitz
    organizationThe MITRE Corporation
  • nameMaria Mikhno
    organizationALTX-SOFT
descriptionThe file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the local system via a web page containing a script to upload the files.
familywindows
idoval:org.mitre.oval:def:963
statusaccepted
submitted2004-04-30T12:00:00.000-04:00
titleIE File Upload Vulnerability
version67

References