CVE-2006-0015

Medium

Description

Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.

SeverityMedium

CVSS6.8

Exploit probability—

Product

Microsoft Frontpage Server Extensions

PublishedApr 11, 2006

First seenApr 11, 2006

How to fix

Vendor advisories

docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-017

Affected products

Product	Affected versions	Fixed in
microsoft frontpage_server_extensions	2002	—
microsoft sharepoint_team_services	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.