Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0648. PoCs published by GreyMagic Software.
AI-analyzed exploit summary This exploit leverages a flaw in Microsoft Internet Explorer to read the contents of XML files and partial contents of other files from a known location on a victim's system. It uses a script tag with an XML source and JavaScript to parse and display the file contents or error details.
Description
The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file.
Exploits (1)
This exploit leverages a flaw in Microsoft Internet Explorer to read the contents of XML files and partial contents of other files from a known location on a victim's system. It uses a script tag with an XML source and JavaScript to parse and display the file contents or error details.