CVE-2002-1745

Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.

Scoring

CVSS base score
0.41
EPSS probability
10.17%
Published
2005-06-21
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs