Description
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
Remediation
References
Related Vulnerabilities
WordPress Plugin MapSVG Lite Arbitrary File Disclosure (4.2.3.1)
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33334)
WordPress Plugin Batch Cat Security Bypass (0.3)
Joomla! Core 1.0.x Remote File Inclusion (1.0.11 - 1.0.14)
WordPress Plugin Fusion:Extension-Menu Multiple Unspecified Vulnerabilities (1.0.2)