Microsoft Security Bulletin (MS00-060) - On August 25, 2000, Microsoft released the original version of this bulletin, to alert customers that they need to upgrade IIS to prevent cross site scripting attacks. A new variant of this attack has just been reported, and all sites need to install an upgraded patch to protect thier users against cross site scripting attacks. Microsoft FAQ on this issue available here.
Microsoft Security Bulletin (MS00-060) - On August 25, 2000, Microsoft released the original version of this bulletin, to alert customers that they need to upgrade IIS to prevent cross site scripting attacks. A new variant of this attack has just been reported, and all sites need to install an upgraded patch to protect thier users against cross site scripting attacks. Microsoft FAQ on this issue available here.