Description
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.
References
- MS99-015 vendor-advisory
Unscored
CVE-1999-0489
EUVD-1999-0488GHSA-r82c-58h4-qgvv
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "unt…
Published Feb 4, 2000 · Updated Aug 1, 2024 · Assigned by mitre