Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2000-0302

4 documents4 sources

Severity

5.0MEDIUM

EPSS

74.4%

top 1.15%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Microsoft Index Server

Timeline

PublishedMar 31

Latest updateApr 30

Description

Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmicrosoft/index_server2.0

🔴Vulnerability Details

GHSA

GHSA-44jg-32fw-4mwj: Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument t↗2022-04-30

▶

CVEList

CVE-2000-0302: Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument t↗2001-05-07

▶

💥Exploits & PoCs

Exploit-DB

Microsoft Index Server 2.0 - '%20' ASP Source Disclosure↗2000-03-31

▶