Description

Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages.

Remediation

References

CVE-2008-0075

Related Vulnerabilities

RubyGems Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1000078)

Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.8)

ReviveAdserver 7PK - Security Features Vulnerability (CVE-2016-9470)

XWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-24897)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2005-4836)

Severity

Critical

Classification

CVE-2008-0075 CWE-94

Tags

Missing Update Known Vulnerabilities