CVE-2001-0089

This exploit leverages a design flaw in the INPUT TYPE=FILE HTML form element to trick users into uploading known files from their local system. The VBScript manipulates key presses to inject a predefined file path (e.g., C:\WINNT\REPAIR\SAM._) into the file input field, potentially exposing sensitive information.