Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-1688. PoCs published by Andreas Sandblad.
AI-analyzed exploit summary This exploit leverages a vulnerability in Internet Explorer 5.5 and 6.0 where JavaScript URLs stored in the browser history can execute in the context of a previously visited page. The PoC demonstrates arbitrary file execution, file reading, and cookie theft via crafted JavaScript URLs triggered by the back button.
Description
The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authentication information via cookies by injecting JavaScript into the URL, which is executed when the user hits the Back button.
Exploits (1)
This exploit leverages a vulnerability in Internet Explorer 5.5 and 6.0 where JavaScript URLs stored in the browser history can execute in the context of a previously visited page. The PoC demonstrates arbitrary file execution, file reading, and cookie theft via crafted JavaScript URLs triggered by the back button.