CVE-2000-0710
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers...
CVE-2000-0710 is a medium vulnerability (CVSS 5.0) in Microsoft Frontpage, published September 21, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 26.4%, the 98th percentile. No source names a fixed version.
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
Exploit likelihood
What each source reports
NVD Score used
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
- Record
CVE-2000-0710- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
- Record
CVE-2000-0710- Updated
- 2026-11-02
EUVDEUVD-2000-0706 No score
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
- Record
EUVD-2000-0706- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7cv3-2v97-6cpf No score
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers...
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
- Record
GHSA-7cv3-2v97-6cpf- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |