CVE-2001-0986 | BDVDB-2026-3200 Detail

Description#

SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/3339
http://www.securityfocus.com/archive/1/214217
https://exchange.xforce.ibmcloud.com/vulnerabilities/7125

Exploit#

No public exploit known

History#

Version 12002-02-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.