CVE-2000-0413
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 42%
from disclosure to weapon0 days
Published on NVDJun 15
1st PoCMay 6
exploitation probability
42%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/19897⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.