cve/2000/CVE-2000-0884.md

18 lines
685 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2000-0884](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0884)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/mokrani-zahir/stock