Description
Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.
References
- MS03-018 vendor-advisory
- oval:org.mitre.oval:def:66 vdb-entry signature