VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 20, 2000· Updated Jun 16, 2026

CVE-2000-0746

CVE-2000-0746

Description

Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Microsoft/Frontpage
    cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*
  • Microsoft/Internet Information Server2 versions
    cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*
  • Microsoft/IISllm-fuzzy
    Range: 4.0, 5.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.