Improper input validation in Microsoft Internet_information_services
CVE-2009-4445
Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third-party upload applications, allows remote attackers to create empty files with arbitrary extensions via a filename containing an initial extensio…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.128 (95.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_information_services
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)