Description
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execute HTML script as other users through (1) a certain ASP file in the IISHELP virtual directory, or (2) possibly other unknown attack vectors.
References
- iis-admin-pages-xss(10501) vdb-entry
- 6072 vdb-entry
- oval:org.mitre.oval:def:942 vdb-entry signature
- N-011 third-party-advisory government-resource
- 6068 vdb-entry
- http://www.lac.co.jp/security/intelligence/SNSAdvisory/58.html
- oval:org.mitre.oval:def:944 vdb-entry signature
- MS02-062 vendor-advisory
- 20021105 [SNS Advisory No.58] Microsoft IIS Local Cross-site Scripting Vulnerability mailing-list