Description In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. Remediation References CVE-1999-0278 Related Vulnerabilities MySQL CVE-2020-2588 Vulnerability (CVE-2020-2588) DataTables Prototype Pollution Vulnerability (CVE-2020-28458) WordPress Plugin RSVP and Event Management Cross-Site Scripting (2.3.7) MySQL CVE-2022-21638 Vulnerability (CVE-2022-21638) WordPress Plugin LeadSnap PHP Object Injection (1.23) Severity Medium Classification CVE-1999-0278 Tags Missing Update Known Vulnerabilities