Description
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
Cappricio-Securities/CVE-2000-0114 ★ 2 · May 30, 2024
Microsoft FrontPage Extensions Check (shtml.dll)
-
adhamelhansye/CVE-2000-0114 ★ 0 · Jul 11, 2024
This a CVE I found it in VDP at hackerone Platform
-
Josekutty-K/frontpage-server-extensions-vulnerability-scanner ★ 0 · Jul 11, 2024
Python script to scan for CVE-2000-0114 vulnerability in Frontpage Server Extensions. Automates subdomain enumeration and vulnerability scanning using subfinder and nuclei. For educational and profes…
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Microsoft FrontPage Extensions - Information Disclosure http/cves/2000/CVE-2000-0114.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.