CVE-2002-0148

Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

64.49% chance of exploitation in the next 30 days, 99th percentile

Published

2003-04-02

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21372

References

• CVE Record
• NVD entry

Related

• CVE-2002-0143
• CVE-2002-0153
• CVE-2002-0142
• CVE-2002-0158
• CVE-2002-0140
• CVE-2002-0162