CVE-2000-1104

Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed…

published December 19, 2000

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05618 · 92.9th percentile
Published
2000-12-19T05:00Z
EPSS history
Timeline
  • 19 DEC 05:00Z
    Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed…
    cvelistv5