Microsoft Internet Explorer 5 – Classic Mode FTP Client Cross Domain Scripting-安全小百科

Microsoft Internet Explorer 5 – Classic Mode FTP Client Cross Domain Scripting

漏洞ID	1053932	漏洞类型
发布时间	2003-06-04	更新时间	2003-06-04
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22728

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/7810/info

The Microsoft Internet Explorer FTP indexing implementation could allow script code to be executed in the security zone of another FTP site. This vulnerability only exists when Internet Explorer FTP is used in "Classic Mode".

Any script would be executed with the permissions of the user running Internet Explorer. 

ftp://%3cimg%20src%3d%22%22%20onerror%3d%22alert%28document%2eURL%29%22%3e.example.com/

相关推荐: SunOS CKItem Unspecified Buffer Overflow Vulnerability

SunOS CKItem Unspecified Buffer Overflow Vulnerability 漏洞ID 1102893 漏洞类型 Boundary Condition Error 发布时间 2001-09-17 更新时间 2001-09-17 …

文章版权归作者所有，未经允许请勿转载。

THE END