Description In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. Remediation References CVE-1999-0278 Related Vulnerabilities WordPress Plugin WPML (WordPress Multilingual) Cross-Site Request Forgery (4.3.6) WordPress Plugin HTML5 AV Manager for WordPress 'custom.php' Arbitrary File Upload (0.2.7) b2evolution Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-2945) phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-3457) Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-37821) Severity Medium Classification CVE-1999-0278 Tags Missing Update Known Vulnerabilities