CVE-2007-0939

MEDIUM 4.3CVE-2007-0939 · Published 10/04/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
content management server microsoft	`= 2001= 2002`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."

References

secunia.com/advisories/24819
osvdb.org/34007
securityfocus.com/archive/1/466331/100/200/threaded
securityfocus.com/bid/22860
securitytracker.com/id
vupen.com/english/advisories/2007/1322
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-018
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1575

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free