Beveiligingsadvies

CVE-2000-1104

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2000-12-19 05:00:00
Laatst bijgewerkt 2024-08-08 05:45:36
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site.