CVE-2003-0114: Microsoft Ie

Medium severity, CVSS 5.0. EPSS: 14.6% chance of exploitation in the next 30 days.

The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the local system via a web page containing a script to upload the files.

Affected products

• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 5.0.1 only; version 5.5 only; version 6.0 only

Published 2003-05-12. Last modified 2026-06-16.