Unscored severity · published Apr 11, 2006
CVE-2006-0015
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to…
–
CVSS
24.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)24.6% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
Frontpage Server Extensions · Microsoft
2002 · source: NVD
ST
Sharepoint Team Services · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0015
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0015
Patch
http://secunia.com/advisories/19623
securityreason.com
http://securityreason.com/securityalert/704
Patch
http://securitytracker.com/id?1015895
Patch
http://securitytracker.com/id?1015896
Exploit
http://www.argeniss.com/research/ARGENISS-ADV-040602.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/430803/100/0/threaded
More from Frontpage Server Extensions
–
CVE-2003-0822
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a…
–
CVE-2003-0824
Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote…
–
CVE-2002-0692
Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU…
–
CVE-2001-0341
Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration…