EDB-151

functional

Microsoft Internet Explorer - URL Injection in History List (MS04-004)

view exploit source exploit_dbverifiedtype remoteauthor Andreas Sandbladpublished 2004-02-04catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2003-1026UShigh9.3Exploit
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and execut…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan