Description

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.

Remediation

References

CVE-2000-0024

Related Vulnerabilities

WordPress Plugin Support Ticket System Multiple SQL Injection Vulnerabilities (1.2)

MySQL CVE-2015-0499 Vulnerability (CVE-2015-0499)

WordPress Plugin Transposh WordPress Translation Multiple Cross-Site Scripting Vulnerabilities (1.0.7)

WordPress Plugin Simple Sticky Footer Cross-Site Request Forgery (1.3.2)

WordPress Plugin Helpie FAQ-WordPress FAQ Accordion Security Bypass (0.7)

Severity

Medium

Classification

CVE-2000-0024

Tags

Missing Update Known Vulnerabilities