Internet Information Services Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-0075)

Description

Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages.

Remediation

References

CVE-2008-0075

Related Vulnerabilities

Python Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-4559)

Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0124)

MySQL CVE-2016-0606 Vulnerability (CVE-2016-0606)

WordPress 4.3.x PHP Object Injection (4.3 - 4.3.25)

WordPress Plugin Age Gate Unspecified Vulnerability (2.18.5)

Severity

Critical

Classification

CVE-2008-0075 CWE-94