Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
From 神龙GPT (AIGC)
"Internet Explorer 4.0 and 5.0 漏洞:通过域名和 escaped 字符从另一个域名获取客户端 cookies"