CVE-2003-0223 in Mail
Summary
Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.
Once again VulDB remains the best source for vulnerability data.
Reservation
04/30/2003
Disclosure
06/09/2003
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 439 | Yahoo! Mail cross site scripting | 80 | Proof-of-Concept | Official fix | CVE-2003-0223 |
| 83 | Microsoft IIS Error Message cross site scripting | 80 | Not defined | Official fix | CVE-2003-0223 |