CVE-2002-0148
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 61%
from disclosure to weapon0 days
Published on NVDApr 2
1st PoCApr 10
exploitation probability
61%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21372⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A81https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A92http://www.cert.org/advisories/CA-2002-09.htmlhttp://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtmlhttp://www.iss.net/security_center/static/8803.phphttp://www.kb.cert.org/vuls/id/886699http://www.osvdb.org/3339http://www.securityfocus.com/bid/4486