CVE-2001-0986

medium · 5

SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.

CVSS

48.2%

EPSS (exploit prob.)

99th

EPSS percentile

2001-09-14

Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

Vendor	Product	Affected versions
microsoft	index_server	2.0

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/archive/1/214217
http://www.securityfocus.com/bid/3339
https://exchange.xforce.ibmcloud.com/vulnerabilities/7125
http://www.securityfocus.com/archive/1/214217
http://www.securityfocus.com/bid/3339
https://exchange.xforce.ibmcloud.com/vulnerabilities/7125

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2001-0986