Description

Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.

Remediation

References

CVE-2002-1718

Related Vulnerabilities

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5835)

WordPress Plugin Popups, Welcome Bar, Optins and Lead Generation-Icegram Cross-Site Scripting (1.10.28.2)

Nexus Repository Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-27907)

WordPress Plugin WP Social Feed Gallery Cross-Site Request Forgery (2.4.7)

WordPress Plugin SrbTransLatin Multiple Vulnerabilities (1.46)

Severity

Medium

Classification

CVE-2002-1718 CWE-200

Tags

Missing Update Known Vulnerabilities