Description
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
Remediation
References
Related Vulnerabilities
WordPress Plugin Search Types Custom Fields Widget Unspecified Vulnerability (1.3)
SharePoint CVE-2020-0892 Vulnerability (CVE-2020-0892)
Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3518)
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.5)
WordPress Plugin FavIcon Switcher Cross-Site Request Forgery (1.2.11)