Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces. NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Internet Explorer XmlHttpRequest参数验证漏洞
Vulnerability Description
Internet Explorer 6.0及可能的其他版本，远程攻击者可绕过同源安全策略并在预期的域之外进行请求，作法是通过对一个XMLHttpRequest(Microsoft.XMLHTTP) 对象调用open并在第一个参数(方法名称)中使用制表符、换行和回车字符，一些可以将制表符转化为空格的代理服务器能够支持这种作法。
CVSS Information
N/A
Vulnerability Type
N/A