Cross-Site Scripting Vulnerability in IIS by Microsoft

CVE-2000-0746

Summary

Vulnerabilities in Internet Information Services (IIS) 4.0 and 5.0 expose users to cross-site scripting attacks. These flaws allow malicious web operators to insert scripts into links pointing to trusted sites. When error messages are returned to clients, these scripts are executed in the context of the trusted site, facilitating potential data theft or session hijacking. This breach of security highlights the need for web administrators to implement stringent validation and sanitization of user input and error handling to mitigate the risks associated with cross-site scripting exploits.

References