CVE-2000-0746
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2000-0746
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
微软IIS跨站脚本攻击.shtml漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IIS 4.0和5.0版本存在一些漏洞，没有正确防止跨站脚本攻击（CSS）。恶意web网站操作员可以利用该漏洞在信任网站连接中嵌入脚本，这些脚本是由客户端错误信息未经引用而返回的，然后客户端就可以像信任网站一样在相同环境中执行这些脚本。该漏洞也称为“IIS Cross-Site Scripting”漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2000-0746
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2000-0746
请登录查看更多情报信息。
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060vendor-advisoryx_refsource_MS
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=39A12BD6.E811BF4F%40nat.bgmailing-listx_refsource_BUGTRAQ
- https://nvd.nist.gov/vuln/detail/CVE-2000-0746
Same Patch Batch · n/a · 2000-09-21 · 48 CVEs total
| CVE-2000-0769 | O'Reilly WebSite Pro写访问漏洞 | |
| CVE-2000-0775 | Robotex Viking 服务器缓冲区溢出漏洞 | |
| CVE-2000-0785 | WircSrv IRC服务器读取任意文件漏洞 | |
| CVE-2000-0794 | IRIX libgl.so缓冲区溢出漏洞 | |
| CVE-2000-0798 | IRIX xfs truncate()权限检查漏洞 | |
| CVE-2000-0800 | SuSE linuxnfs/knfsd rpc.kstatd权限提升漏洞 | |
| CVE-2000-0801 | HP-UX bdf/df缓冲区溢出漏洞 | |
| CVE-2000-0802 | BAIR权限提升漏洞 | |
| CVE-2000-0793 | NortonAntivirus Novell客户端防毒自动保护失效漏洞 | |
| CVE-2000-0772 | Tumbleweed MMS No默认密码漏洞 | |
| CVE-2000-0774 | Bajie Webserver绝对路径泄露漏洞 | |
| CVE-2000-0760 | Apache Tomcat Snoop Servlet远程信息泄漏漏洞 | |
| CVE-2000-0759 | Apache Tomcat 3.1远程泄露服务器信息漏洞 | |
| CVE-2000-0757 | Aptis Software TotalBill远程命令执行漏洞 | |
| CVE-2000-0756 | Microsoft Outlook Vcard DoS漏洞 | |
| CVE-2000-0755 | HP OpenView Network Node Manager 6.1 Web密码漏洞 | |
| CVE-2000-0752 | FreeBSD端口brouted安装许可漏洞 | |
| CVE-2000-0748 | OpenLDAP 'ud'群组可写漏洞 | |
| CVE-2000-0736 | Becky! Internet Mail头缓冲区溢出漏洞 | |
| CVE-2000-0735 | Becky! Internet邮件头缓冲区溢出漏洞 |
Showing top 20 of 48 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2000-0746
No comments yet