Detections
Analytics
Microsoft IIS ASP Redirection Function XSS
medium Nessus Plugin ID 10844
Language:
Synopsis
The remote host is affected by a cross-site scripting vulnerability.Description
The remote host contains an ASP.NET installation that is affected by a cross-site scripting vulnerability. An attacker can exploit this issue to execute arbitrary HTML or script code in a user's browser within the security context of the affected site.Solution
Microsoft released a patch for this issue. Refer to the supplied link.See Also
Plugin Details
Severity: Medium
ID: 10844
File Name: asp_net_css.nasl
Version: 1.37
Type: remote
Family: CGI abuses : XSS
Published: 2/5/2002
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.2
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:microsoft:internet_information_server
Required KB Items: www/ASP, www/iis
Exploit Ease: No exploit is required
Exploited by Nessus: true
Patch Publication Date: 5/28/2002
Vulnerability Publication Date: 5/28/2003
Reference Information
CVE: CVE-2003-0223
BID: 7731