CVE-2007-2815
Published · Updated
45Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 73%
from disclosure to weapon9 days
Published on NVDMay 22
1st PoC+9d
exploitation probability
73%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile parameter to null.htw.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4016⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.