CVE-2004-1133 | BDVDB-2026-7483 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inject arbitrary HTML and web script via (1) HTTP headers such as "Connection" or (2) invalid parameters whose values are echoed in the resulting error message.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=full-disclosure&m=110234486823233&w=2
http://www.exaprobe.com/labs/advisories/esa-2004-1206.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18375

Exploit#

No public exploit known

History#

Version 12004-12-08Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.