Description
IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.
Remediation
References
Related Vulnerabilities
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3092)
WordPress Plugin Disable Comments Cross-Site Request Forgery (1.0.3)
ReviveAdserver Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-22948)
WordPress Plugin PayPal for WooCommerce Security Bypass (1.5.7)
Beego Framework Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-16354)