Filtered by vendor Microsoft Subscriptions
Filtered by product Frontpage Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2000-0413 1 Microsoft 3 Frontpage, Internet Information Server, Internet Information Services 2025-04-03 N/A
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path.
CVE-2000-0153 1 Microsoft 2 Frontpage, Personal Web Server 2025-04-03 N/A
FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
CVE-2000-0710 1 Microsoft 1 Frontpage 2025-04-03 N/A
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.