Vulnerability in Microsoft Hotmail
CVE-2000-0085
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
EPSS: 0.149 (96.4th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Hotmail
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC)