Vulnerability in N/a

CVE-2000-0630

IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.

EPSS: 0.760 (98.9th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

1488 (vdb-entry, x_refsource_BID)
MS00-044 (x_refsource_MS, vendor-advisory)
iis-htr-obtain-code(5104) (vdb-entry, x_refsource_XF)