Description
A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."
Remediation
References
Related Vulnerabilities
Contao Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10642)
WordPress Plugin Restaurant Reservations Privilege Escalation (1.3)
WordPress Plugin Media Library Assistant Multiple Vulnerabilities (2.65)
WordPress Plugin Hotjar Connecticator Cross-Site Scripting (1.1.1)
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2025-11187)