NVD

Id
58761  
Name
CVE-2006-0015  
Description
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2006-04-11  
Modified Date
2017-07-10  
Seq
2006-0015  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
301537 58761 CVE-2006-0015 oval:org.mitre.oval:def:1748  View
301538 58761 CVE-2006-0015 704  View
301539 58761 CVE-2006-0015 1015895  View
301540 58761 CVE-2006-0015 1015896  View
301541 58761 CVE-2006-0015 http://www.argeniss.com/research/ARGENISS-ADV-040602.txt  View
301542 58761 CVE-2006-0015 MS06-017  View
301543 58761 CVE-2006-0015 20060412 Vulnerability in Microsoft FrontPage Server Extensions Could Allow Cross-Site Scripting  View
301544 58761 CVE-2006-0015 17452  View
301545 58761 CVE-2006-0015 ADV-2006-1322  View
301546 58761 CVE-2006-0015 fpse-html-xss(25537)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57973 JVNDB-2006-000169 Microsoft Internet Information Services の FPSE におけるクロスサイトスクリプティングの脆弱性 Microsoft Internet Information Services (IIS) に含まれる FrontPage Server Extensions (FPSE) には、サーバ側管理プログラム Fpadmdll.dll において特定の引数 (operation、command、name) に対する文字列チェックが適切に行われていないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-0015 16117 CVE-2006-0015 58761 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000169.html 2006-04-11 2007-04-01 View