CVEvulnerability
CVE-2002-1688
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authentication information via cookies by injecting JavaScript into the URL, which is executed when the user hits the Back button.
Affected configurations
• microsoft internet explorer 5.5
• microsoft internet explorer 6.0
Related
Referenced by CWE · observed example (1)
- CWE-270 Privilege Context Switching Error weakness
References
- http://online.securityfocus.com/archive/1/267561 online.securityfocus.com
- http://www.securityfocus.com/bid/4505 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8844 exchange.xforce.ibmcloud.com
- http://online.securityfocus.com/archive/1/267561 online.securityfocus.com
- http://www.securityfocus.com/bid/4505 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8844 exchange.xforce.ibmcloud.com