Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2003-1026

EPSS 55.82% · P98
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2003-1026

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Internet Explorer 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Internet Explorer 5.01到6 SP1版本存在权限许可和访问控制问题漏洞。远程攻击者可以借助子框架中的javascript protocol URL 绕过区限制，当调用history.back (back)函数时，该漏洞被加入到历史目录并且在顶层窗口区域中执行。也称为“Travel Log Cross Domain 漏洞”。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2003-1026

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2003-1026

请登录查看更多情报信息。

Same Patch Batch · n/a · 2004-01-08 · 10 CVEs total

CVE-2003-0696IBM AIX GetIPNodeByName API套接口管理漏洞
CVE-2003-0904Microsoft Exchange Server 信息泄露漏洞
CVE-2003-1027Microsoft Internet Explorer 安全漏洞
CVE-2003-1028Microsoft Internet Explorer 安全漏洞
CVE-2004-0014nd工具远程缓冲区溢出漏洞
CVE-2004-0029Lotus Notes Domino 6.0.2(linux)目录权限不安全漏洞
CVE-2004-0030PhpGedView多个PHP包含漏洞
CVE-2004-0034Phorum Multiple跨站点脚本/HTML注入漏洞
CVE-2004-0037Open Text Corporation FirstClass本地文件引用命令执行漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2003-1026

No comments yet

Leave a comment