CNCVE编号：CNCVE-20000942 CVE编号：CVE-2000-0942 安全级别：高 漏洞中文描述： Windows 2000的索引服务中的CiWebHitsFile组件中存在一个漏洞，该漏洞可导致远程攻击者通过在.htw请求中的CiRestriction参数制造交叉站点脚本攻击(CSS,cross site scripting)。 漏洞英文描述： The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability. 漏洞参考： BUGTRAQ:20001028 IIS 5.0 cross site scripting vulnerability - using .htw | URL:http://www.securityfocus.com/archive/1/141903 | MS:MS00-084 | URL:http://www.microsoft.com/technet/security/bulletin/MS00-084.asp | BID:1861 | URL:http://ww 系统类型： Win2000/NT 漏洞类型：其他