Description
IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.
Remediation
References
Related Vulnerabilities
WordPress Plugin Import all XML, CSV & TXT into WordPress Cross-Site Scripting (3.8.7)
WordPress Plugin WP Fastest Cache Cross-Site Request Forgery (0.9.0.2)
WordPress Plugin Facebook Opengraph Meta 'all_meta.php' SQL Injection (1.0)
Jenkins 7PK - Security Features Vulnerability (CVE-2014-9634)
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-0207)