CVE-1999-0750
MediumExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
Risk Assessment
Attackers may gain access to the user's account, potentially leading to data theft or account takeover.
Recommendation
It is recommended to avoid using the STYLE tag in HTML and to implement additional security measures such as input filtering and validation.
Other vulnerabilities in Hotmail
See all- CVE-2000-0081High
Hotmail does not properly filter JavaScript code from a user's mailbox, allowing a remote attacker to execute the code using hexadecimal codes to specify the javascript: protocol.
- CVE-2000-0085High
Hotmail does not properly filter JavaScript code from a user's mailbox, allowing a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
Original NVD description (English source)
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.