CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2002-1745
https://notcve.org/view.php?id=CVE-2002-1745
Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files. • http://online.securityfocus.com/archive/1/268303 http://www.securityfocus.com/bid/4543 https://exchange.xforce.ibmcloud.com/vulnerabilities/8853 • CWE-193: Off-by-one Error •
CVSS: 4.3EPSS: 1%CPEs: 3EXPL: 1CVE-2002-1700 – ColdFusion MX - Missing Template Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2002-1700
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message. • https://www.exploit-db.com/exploits/21548 http://online.securityfocus.com/archive/1/277487 http://www.macromedia.com/v1/Handlers/index.cfm?ID=23047 http://www.securityfocus.com/bid/5011 https://exchange.xforce.ibmcloud.com/vulnerabilities/9360 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 1CVE-2002-1908
https://notcve.org/view.php?id=CVE-2002-1908
Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that contains a large number of "/" (forward slash) characters. • http://www.iss.net/security_center/static/10370.php http://www.securiteam.com/windowsntfocus/6C00C1F5QA.html http://www.securityfocus.com/bid/5907 •
CVSS: 5.0EPSS: 3%CPEs: 1EXPL: 2CVE-2002-1744 – Microsoft IIS 5.0 - 'CodeBrws.asp' Source Code Disclosure
https://notcve.org/view.php?id=CVE-2002-1744
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot). • https://www.exploit-db.com/exploits/21385 http://online.securityfocus.com/archive/1/267945 http://online.securityfocus.com/archive/1/268065 http://www.securityfocus.com/bid/4525 https://exchange.xforce.ibmcloud.com/vulnerabilities/8853 •
CVSS: 7.2EPSS: 0%CPEs: 4EXPL: 0CVE-2002-1933
https://notcve.org/view.php?id=CVE-2002-1933
The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window. • http://online.securityfocus.com/archive/1/288415 http://www.iss.net/security_center/static/9946.php http://www.securityfocus.com/bid/5535 •