CVE-2001-0089: Microsoft Internet Explorer

Low severity, CVSS 2.6. EPSS: 14.5% chance of exploitation in the next 30 days.

Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability.

Affected products

• Microsoft Internet Explorer: up to and including 5.5; version 5.0 only; version 5.01 only

Published 2001-02-16. Last modified 2026-06-16.