NVD

Id
70416  
Name
CVE-2005-4827  
Description
Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces. NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-31  
Modified Date
2008-09-05  
Seq
2005-4827  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
362897 70416 CVE-2005-4827 20070203 Web 2.0 backdoors made easy with MSIE & XMLHttpRequest  View
362898 70416 CVE-2005-4827 20050924 "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein  View
362899 70416 CVE-2005-4827 20070204 Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest  View
362900 70416 CVE-2005-4827 20070203 Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest  View
362901 70416 CVE-2005-4827 14969  View

Related JVN