high7.5Public exploit code
CVE-2003-0317
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IISProtect 2.1/2.2 - Authentication Bypass2003-05-22 · remote · windows · Verified
Impact
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iisprotect | Iisprotect | Versions 2.1, 2.2 |