Description

Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.

Remediation

References

CVE-2002-0075

Related Vulnerabilities

WordPress Plugin PHP Event Calendar for WordPress Arbitrary File Upload (1.6)

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-8769)

WordPress Plugin wp superb Slideshow Arbitrary File Upload (2.4)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-0218)

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.26)

Severity

High

Classification

CVE-2002-0075

Tags

Missing Update Known Vulnerabilities