### [CVE-2002-0591](https://www.cve.org/CVERecord?id=CVE-2002-0591) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=brightgreen) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) ### Description Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename. ### POC #### Reference No PoCs from references. #### Github No PoCs found on GitHub currently. #### ExploitDB - https://www.exploit-db.com/exploits/21386