CVE-2004-1133

Currently unrated

Key Information:

Vendor
Microsoft
Status
W3who.dll
Vendor
CVE Published:
10 January 2005

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inject arbitrary HTML and web script via (1) HTTP headers such as "Connection" or (2) invalid parameters whose values are echoed in the resulting error message.

References

http://marc.info/?l=full-disclosure&m=110234486823233&w=2
mailing-listx_refsource_FULLDISC
http://www.exaprobe.com/labs/advisories/esa-2004-1206.html
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/18375
vdb-entryx_refsource_XF

EPSS Score

0% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.