Unscored CVE-2002-0242 EUVD-2002-0239GHSA-7jfp-7w7f-mfcm

Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML …

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed.

References

20020207 Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) mailing-list