Description
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
Remediation
References
Related Vulnerabilities
WordPress Plugin The Events Calendar Cross-Site Scripting (3.0)
Moodle URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-14831)
Joomla! Core 2.5.x Security Bypass (2.5.0 - 2.5.2)
WordPress Plugin Cookie Notice & Compliance for GDPR/CCPA Cross-Site Scripting (2.1.1)
Apache HTTP Server CVE-2012-0031 Vulnerability (CVE-2012-0031)