NVD

Id
76987  
Name
CVE-2000-0746  
Description
Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2000-10-20  
Modified Date
2008-09-05  
Seq
2000-0746  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
387320 76987 CVE-2000-0746 MS00-060  View
387321 76987 CVE-2000-0746 1594  View
387322 76987 CVE-2000-0746 1595  View
387323 76987 CVE-2000-0746 20000821 IIS 5.0 cross site scripting vulnerability - using .shtml files or /_vti_bin/shtml.dll  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64278 JVNDB-2000-000058 Microsoft IIS における shtml 形式のリクエストを利用したクロスサイトスクリプティングの脆弱性 Microsoft IIS には、テキストが追加されている shtml 形式のファイルへのリクエストを受信した際に、それに対するエラーメッセージに実行可能なスクリプトを含めることが可能である脆弱性が存在します。 CVE-2000-0746 2322 CVE-2000-0746 76987 7.5 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000058.html 2000-08-21 2007-04-01 View