Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execute HTML script as other users through (1) a certain ASP file in the IISHELP virtual directory, or (2) possibly other unknown attack vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Internet Information Services 安全漏洞
Vulnerability Description
Microsoft Internet Information Services（IIS）是美国微软（Microsoft）公司的一款适用于Windows Server平台的Web服务器。 Microsoft IIS服务程序中用于管理目的的WEB页面对用户提交的输入缺少过滤，远程攻击者可以利用这个漏洞构建恶意WEB页，诱使用户点击，可以窃取目标用户基于Cookie认证的敏感信息，或者进行其他攻击。Microsoft IIS服务程序中两个与管理相关的页面跨站脚本执行漏洞(CSS)。远程攻击者可以在控制的WEB站
CVSS Information
N/A
Vulnerability Type
N/A