Test ID:	1.3.6.1.4.1.25623.1.0.10572
Category:	Web application abuses
Title:	IIS 5.0 Sample App vulnerable to cross-site scripting attack
Summary:	The script /iissamples/sdk/asp/interaction/Form_JScript.asp; (or Form_VBScript.asp) allows you to insert information into a form; field and once submitted re-displays the page, printing the text you entered.;; This .asp doesn't perform any input validation, and hence you can input a; string like:;; .
Description:	Summary: The script /iissamples/sdk/asp/interaction/Form_JScript.asp (or Form_VBScript.asp) allows you to insert information into a form field and once submitted re-displays the page, printing the text you entered. This .asp doesn't perform any input validation, and hence you can input a string like: . Solution: Always remove sample applications from productions servers. In this case, remove the entire /iissamples folder. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2000 Matt Moore

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.