Description

Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.

Remediation

References

CVE-2002-1718

Related Vulnerabilities

WordPress Plugin WP Statistics Multiple Cross-Site Scripting Vulnerabilities (12.0.4)

Liferay DXP Missing Authorization Vulnerability (CVE-2022-39975)

Internet Information Services Improper Input Validation Vulnerability (CVE-2009-4445)

Joomla Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-15699)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-40313)

Severity

Medium

Classification

CVE-2002-1718 CWE-200

Tags

Missing Update Known Vulnerabilities