CVE-2002-0148

Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.

CVSS Metrics

Affected Products (2)

GitHub Security Advisory GHSA-qwp9-6j3h-v26x

Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows...

References (18)

• http://www.cert.org/advisories/CA-2002-09.html US Government Resource
• http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
• http://www.iss.net/security_center/static/8803.php
• http://www.kb.cert.org/vuls/id/886699 US Government Resource
• http://www.osvdb.org/3339
• http://www.securityfocus.com/bid/4486
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A81
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A92
• http://www.cert.org/advisories/CA-2002-09.html US Government Resource
• http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
• http://www.iss.net/security_center/static/8803.php
• http://www.kb.cert.org/vuls/id/886699 US Government Resource
• http://www.osvdb.org/3339
• http://www.securityfocus.com/bid/4486