CVE-2000-0746: High severity Microsoft FrontPage vulnerability
Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0746?
CVE-2000-0746 is considered a high-severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2000-0746?
To fix CVE-2000-0746, it is recommended to upgrade to a later version of IIS, or implement appropriate input validation measures.
What software is affected by CVE-2000-0746?
CVE-2000-0746 affects Microsoft Internet Information Server 4.0, Internet Information Services 5.0, and Microsoft Office FrontPage.
What types of attacks can be executed due to CVE-2000-0746?
CVE-2000-0746 allows attackers to perform cross-site scripting (CSS) attacks, potentially executing malicious scripts on users' browsers.
Is CVE-2000-0746 still relevant today?
While CVE-2000-0746 is an older vulnerability, it serves as a reminder of the importance of securing web applications against cross-site scripting.