Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 14/09/2001 Updated: 19/12/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote malicious users to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft index server 2.0

source: wwwsecurityfocuscom/bid/3339/info The sqlqhitasp sample file is used for performing web-based SQL queries Malicious users could send specifically crafted HTTP request to an Internet Information Services server running Index Server to reveal path information, file attributes, and possibly some lines of the file contents The sq ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/214217 http://www.securityfocus.com/bid/3339 https://exchange.xforce.ibmcloud.com/vulnerabilities/7125 https://nvd.nist.gov https://www.exploit-db.com/exploits/21113/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-0986

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect