Servers and applications
CVE-2002-1745
Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.
- Severity
- High 7.5
- Published
- 31 Dec 2002
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Exploit chance
- 19% in the next 30 daysHigher than 97% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- CWE-193
- Attack
- Over the network · No login needed · No user action needed
- Attacker can
- Read data
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Microsoft IISServers and applications · cpe:a:microsoft:internet_information_services |
|