medium5.1Public exploit code
CVE-2000-0942
The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRest…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Indexing Service (Windows 2000/NT 4.0) - '.htw' Cross-Site Scripting2000-10-28 · remote · windows · Verified
Impact
The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Indexing Service | All versions |