CVE-2002-0648

CVE-2002-0648 describes a vulnerability in Microsoft Internet Explorer versions 5.01, 5.5, and 6.0, where the legacy <script> data-island feature for XML allows remote attackers to read arbitrary XML files and portions of other local files. This is achieved by manipulating the "src" attribute of a URL to redirect to a local file. The vulnerability has a CVSS score of 5.0 (medium severity) with a low attack complexity and no authentication required, potentially leading to information disclosure. While not listed on the KEV catalog, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.