Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Index Server 2.0 文件和路径信息泄露漏洞
Vulnerability Description
CVE(CAN) ID: CAN-2001-0986 Microsoft Index Server中有一个样本程序"sqlqhit.asp"，用于演示基于Web的数据 库查询，该程序位于"\inetpub\iissamples\ISSamples\"目录下，且是缺省安装的。 通过向该程序发送一个精心构造的请求，可能导致物理路径，文件属性，甚至是部分文 件内容泄露。
CVSS Information
N/A
Vulnerability Type
N/A