Description

IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.

Remediation

References

CVE-2000-0630

Related Vulnerabilities

WordPress Plugin Easy Social Feed-Social Photos Gallery-Post Feed-Like Box Security Bypass (6.3.3)

WordPress Plugin Import all XML, CSV & TXT into WordPress Cross-Site Request Forgery (5.6)

Oracle Database Server CVE-2016-5516 Vulnerability (CVE-2016-5516)

WordPress Plugin WP Socializer-Simple & Easy Social Media Share Icons Cross-Site Scripting (2.4.2)

Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-47184)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2000-0630