CVE-2000-0942

The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-rp27-2r6m-x965

The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote...

References (8)

• http://www.securityfocus.com/archive/1/141903
• http://www.securityfocus.com/bid/1861 Exploit, Patch, Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-084
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5441
• http://www.securityfocus.com/archive/1/141903
• http://www.securityfocus.com/bid/1861 Exploit, Patch, Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-084
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5441