Skip to main content
UNPWNED
Scan free
CVE Radar
HighIIS

CVE-2000-0886

IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.

CVSS Base Score
7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploit Probability
99%EPSS PERCENTILE0100

More exploitable than 99% of all CVEs · Top 1%

Is your site exposed to this?

Run a free scan. UNPWNED fingerprints your stack and flags this CVE class if the affected technology is detected.

Check my site
Details
Published
2000-12-19
Last modified
2026-09-23
Affected
IIS
References
NVD Detail OSV.dev GitHub Advisories

Related exploited CVEs in IIS

CVE-2000-0884
High · 7.5 CVSSIIS
CVE-2000-0970
High · 7.5 CVSSIIS
CVE-2000-0951
Medium · 5 CVSSIIS

Data from the National Vulnerability Database (NVD), CISA KEV, and FIRST.org EPSS. This product uses the NVD API but is not endorsed or certified by the NVD. EPSS is a probability estimate, not a guarantee of exploitation.