Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Internet Information Services Other Vulnerability - CVE-2000-0746 - Vulnerability Database
Internet Information Services

Internet Information Services Other Vulnerability - CVE-2000-0746

High
Reference: CVE-2000-0746
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2000-0746
Title: Internet Information Services Other Vulnerability
Overview:

Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site aka the quotIIS Cross-Site Scriptingquot vulnerabilities.