CVE-2001-0986

SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

48.16% chance of exploitation in the next 30 days, 99th percentile

Published

2002-02-02

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21113

References

• CVE Record
• NVD entry

Related

• CVE-2001-0985
• CVE-2001-0987
• CVE-2001-0983
• CVE-2001-0989
• CVE-2001-0979
• CVE-2001-0991