CVE-2002-0148

published 2002-04-22

CVE-2002-0148: Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	products_ms02-018	—	—
microsoft	internet_information_server	—	—
microsoft	internet_information_services	—	—