CVE-2007-0939

Microsoft Content Management Server 2001 SP1 and 2002 SP2 - Cross-Site Scripting via HTML Redirection Queries

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/466331/100/200/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1322
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017894
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/34007
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24819
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22860
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1575

Scores

EPSS 0.1619
EPSS Percentile 96.6%

Details

Status published
Products (2)
microsoft/content_management_server 2001 sp1
microsoft/content_management_server 2002 sp2
Published Apr 10, 2007
Tracked Since Feb 18, 2026