{"id":"CVE-2001-0089","aliases":["EUVD-2001-0089","GHSA-3pww-g69g-29xx"],"status":"published","title":"Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client...","description":"Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the \"File Upload via Form\" vulnerability.","severity":{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.14472,"percentile":0.96653,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2001-02-16T05:00:00Z","modified":"2026-06-16T21:53:38Z","exploits":[{"source":"exploitdb","id":"EDB-20459","title":"Microsoft Internet Explorer 5 - 'INPUT TYPE=FILE' Remote File Upload","type":"remote","platform":"windows","date":"2000-12-01","verified":true,"url":"https://www.exploit-db.com/exploits/20459"}],"products":[{"vendor":"microsoft","product":"internet_explorer"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5615","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2001-0089"},{"url":"https://github.com/advisories/GHSA-3pww-g69g-29xx"}],"sources":{"cve":[{"id":"CVE-2001-0089","description":"Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the \"File Upload via Form\" vulnerability.","status":"published","published":"2001-05-07T04:00:00Z","modified":"2024-08-08T04:06:55.314Z","updated_at":"2026-11-02T14:34:43.358691Z"}],"euvd":[{"id":"EUVD-2001-0089","description":"Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the \"File Upload via Form\" vulnerability.","status":"published","published":"2001-05-07T04:00:00Z","modified":"2024-08-08T04:06:55Z","updated_at":"2026-11-03T01:14:53.392551Z"}],"ghsa":[{"id":"GHSA-3pww-g69g-29xx","title":"Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client...","description":"Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the \"File Upload via Form\" vulnerability.","status":"published","published":"2022-04-30T18:15:24Z","modified":"2023-01-30T05:05:24Z","updated_at":"2026-11-02T14:47:15.872717Z"}],"nvd":[{"id":"CVE-2001-0089","description":"Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the \"File Upload via Form\" vulnerability.","status":"published","published":"2001-02-16T05:00:00Z","modified":"2026-06-16T21:53:38.113Z","cvss":[{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:00:39.593487Z"}]}}