Internet Information Services Other Vulnerability - CVE-2000-1104 - Vulnerability Database

Internet Information Services Other Vulnerability - CVE-2000-1104

High
Reference: CVE-2000-1104
Title: Internet Information Services Other Vulnerability
Overview:

Variant of the quotIIS Cross-Site Scriptingquot vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site.