CVE-2002-0074

Internet Information Server 4.0-5.1 - Cross-Site Scripting in Help File Search Facility

Title source: llm

Description

Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.

References (10)

Core 10

Core References

Mailing List mailing-list x_refsource_bugtraq

http://seclists.org/bugtraq/2002/Apr/0126.html

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/883091

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/4483

Vendor Advisory x_refsource_misc

http://www.cgisecurity.com/advisory/9.txt

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A46

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/3338

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018

US Government Resource third-party-advisory x_refsource_cert

http://www.cert.org/advisories/CA-2002-09.html

Third Party Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/8802.php

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml

Scores

EPSS 0.3103

EPSS Percentile 98.1%

Details

Status published

Products (2)

microsoft/internet_information_server 4.0

microsoft/internet_information_services 5.0

Published Apr 22, 2002

Tracked Since Feb 18, 2026