CVE-2002-2311

CVE-2002-2311 describes a vulnerability in Microsoft Internet Explorer 6.0 and potentially other versions, where remote attackers could upload arbitrary file contents by leveraging JavaScript event handlers (event.ctrlKey or event.shiftKey) during a user's onkeydown event. This vulnerability has a CVSS score of 6.4 (medium severity), indicating it can be exploited over a network with low complexity and without authentication, potentially leading to partial confidentiality and integrity impacts. Despite its age, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.