CVE-2000-1104 | BDVDB-2026-1779 Detail

Description#

Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060

Exploit#

No public exploit known

History#

Version 12000-12-19Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.