CVE-2002-0148

CVE Database · CVE-2002-0148

CVE-2002-0148

· N/AModified

CVSS v3.1

N/A

EPSS

64.49%

Published

Apr 22, 2002

Modified

Apr 15, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMicrosoft IIS 4.0/5.0 - HTTP Error Page Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.

Affected Products (2)

microsoft · internet_information_servervulnerable

microsoft · internet_information_servicesvulnerable

References (18)

http://www.cert.org/advisories/CA-2002-09.html

US Government Resource

http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml

http://www.iss.net/security_center/static/8803.php

http://www.kb.cert.org/vuls/id/886699

US Government Resource

http://www.osvdb.org/3339

http://www.securityfocus.com/bid/4486

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A81

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A92

http://www.cert.org/advisories/CA-2002-09.html

KEV Catalog EPSS Scores Vendors All CVEs