Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2002-0189 — Cross-site Scripting in Microsoft Internet Explorer

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
13.8%
top 5.69%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Internet Explorer
Timeline
PublishedMay 29
Latest updateApr 30

Description

Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDmicrosoft/internet_explorer5.0, 5.5, 6.0+2

🔴Vulnerability Details

1
GHSA
GHSA-ph5w-phqr-wqq2: Cross-site scripting vulnerability in Internet Explorer 6↗2022-04-30
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Internet Explorer 5 - Dialog Same Origin Policy Bypass Variant (MS02-047)↗2002-04-16
▶
CVE-2002-0189 — Cross-site Scripting in Microsoft | cvebase