Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Internet Information Server 跨站脚本漏洞
Vulnerability Description
Microsoft IIS(Internet Information Server) 存在安全漏洞。由于Microsoft IIS建立的错误页面时没有很好的检查用户输入，可以导致攻击者进行跨站脚本执行攻击。每一次IIS碰到HTTP 404代码，它就会显示"404 not found"的页面内容，这个HTML文件使用脚本输出一条到SERVER.TLD的连接，攻击者可以通过构建特殊的包含任意脚本代码命令的404页面连接，当其他用户浏览此连接的时候，包含在里面的脚本代码就会在浏览用户浏览器中执行。可能导致攻击者
CVSS Information
N/A
Vulnerability Type
N/A