Microsoft: >> Internet Explorer >> 5.01 Security Vulnerabilities
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.
CVSS Score
10.0
EPSS Score
0.198
Published
2000-01-07
Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."
CVSS Score
5.1
EPSS Score
0.131
Published
1999-12-08
Page 22