NetSight
high7.5

CVE-2000-0085

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in th…

Impact

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.

Affected products

VendorProductAffected versions
MicrosoftHotmail
All versions

References