Evil-DB LogoEvil-DB
← All CVEs

CVE-1999-0489

high · 10

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.

10
CVSS
12.4%
EPSS (exploit prob.)
96th
EPSS percentile
1999-05-17
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

VendorProductAffected versions
microsoftwindows_nt4.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-1999-0489