CVE-2003-0492: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter...

CVE-1999-0449: Undefined Security Weakness

The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service CPU consumption via a direct request to the 1 advsearch.asp, 2 query.asp, or 3 search.asp scripts...

Microsoft IIS search.asp Direct Request DoS

The remote instance of IIS includes the sample site 'ExAir'. By calling one of the included Active Server Pages, specifically '/iissamples/exair/search/search.asp', an unauthenticated, remote attacker may be cause the web server to hang for up to 90 seconds the default script timeout if the defau...