CVEvulnerability
CVE-2005-0049
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.
Affected configurations
• microsoft sharepoint portal server 2003
• microsoft sharepoint team services
References
- http://www.kb.cert.org/vuls/id/340409 Patch, US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA05-039A.html Patch, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19091 exchange.xforce.ibmcloud.com
- http://www.kb.cert.org/vuls/id/340409 Patch, US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA05-039A.html Patch, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19091 exchange.xforce.ibmcloud.com