CVEvulnerability
CVE-2006-0015
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-04-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
Affected configurations
• microsoft frontpage server extensions 2002
• microsoft sharepoint team services
References
- http://secunia.com/advisories/19623 Patch, Vendor Advisory
- http://securityreason.com/securityalert/704 securityreason.com
- http://securitytracker.com/id?1015895 Patch
- http://securitytracker.com/id?1015896 Patch
- http://www.argeniss.com/research/ARGENISS-ADV-040602.txt Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/430803/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17452 Exploit, Patch
- http://www.vupen.com/english/advisories/2006/1322 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-017 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25537 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1748 oval.cisecurity.org
- http://secunia.com/advisories/19623 Patch, Vendor Advisory
- http://securityreason.com/securityalert/704 securityreason.com
- http://securitytracker.com/id?1015895 Patch
- http://securitytracker.com/id?1015896 Patch
- http://www.argeniss.com/research/ARGENISS-ADV-040602.txt Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/430803/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17452 Exploit, Patch
- http://www.vupen.com/english/advisories/2006/1322 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-017 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25537 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1748 oval.cisecurity.org