medium6.8Public exploit code
CVE-2003-0002
Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Content Management Server 2001 - Cross-Site Scripting2002-10-09 · webapps · asp · Verified
Impact
Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Content Management Server | Version 2001 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=103417794800719&w=2
- http://www.iss.net/security_center/static/10318.php
- http://www.securityfocus.com/bid/5922
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-002
- http://marc.info/?l=bugtraq&m=103417794800719&w=2
- http://www.iss.net/security_center/static/10318.php
- http://www.securityfocus.com/bid/5922
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-002