CVE

Id
5565  
CVE No.
CVE-2002-1181  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execute HTML script as other users through (1) a certain ASP file in the IISHELP virtual directory, or (2) possibly other unknown attack vectors.  
Phase
Modified (20061101)  
Votes
ACCEPT(3) Cole, Green, Wall | NOOP(1) Cox  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
30344 5565 CVE-2002-1181 BUGTRAQ:20021105 [SNS Advisory No.58] Microsoft IIS Local Cross-site Scripting Vulnerability  View
30345 5565 CVE-2002-1181 URL:http://marc.info/?l=bugtraq&m=103651224215736&w=2  View
30346 5565 CVE-2002-1181 MISC:http://www.lac.co.jp/security/intelligence/SNSAdvisory/58.html  View
30347 5565 CVE-2002-1181 MS:MS02-062  View
30348 5565 CVE-2002-1181 URL:http://www.microsoft.com/technet/security/bulletin/ms02-062.asp  View
30349 5565 CVE-2002-1181 CIAC:N-011  View
30350 5565 CVE-2002-1181 URL:http://www.ciac.org/ciac/bulletins/n-011.shtml  View
30351 5565 CVE-2002-1181 BID:6068  View
30352 5565 CVE-2002-1181 URL:http://www.securityfocus.com/bid/6068  View
30353 5565 CVE-2002-1181 BID:6072  View
30354 5565 CVE-2002-1181 URL:http://www.securityfocus.com/bid/6072  View
30355 5565 CVE-2002-1181 OVAL:oval:org.mitre.oval:def:942  View
30356 5565 CVE-2002-1181 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:942  View
30357 5565 CVE-2002-1181 OVAL:oval:org.mitre.oval:def:944  View
30358 5565 CVE-2002-1181 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:944  View
30359 5565 CVE-2002-1181 XF:iis-admin-pages-xss(10501)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63938 JVNDB-2002-000265 Microsoft IIS の管理者の Web サイトにおけるクロスサイトスクリプティングの脆弱性 Microsoft IIS には、「管理者の Web サイト」で利用される IISHELP 仮想ディレクトリ中の特定の ASP ファイルにおいて、ユーザから入力された値に対して適切なフィルタリングを行わないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2002-1181 5565 6.8 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000265.html  View