Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.56769
Kategorie:FreeBSD Local Security Checks
Titel:FreeBSD Ports: frontpage -- cross site scripting vulnerability
Zusammenfassung:The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.

Vulnerability Insight:
The following packages are affected:

frontpage, mod_frontpage13, mod_frontpage20, mod_frontpage21, mod_frontpage22

CVE-2006-0015
Cross-site scripting (XSS) vulnerability in
_vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server
Extensions 2002 and SharePoint Team Services allows remote attackers
to inject arbitrary web script or HTML, then leverage the attack to
execute arbitrary programs or create new accounts, via the (1)
operation, (2) command, and (3) name parameters.

Solution:
Update your system with the appropriate patches or
software upgrades.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2006-0015
BugTraq ID: 17452
http://www.securityfocus.com/bid/17452
Bugtraq: 20060412 Vulnerability in Microsoft FrontPage Server Extensions Could Allow Cross-Site Scripting (Google Search)
http://www.securityfocus.com/archive/1/430803/100/0/threaded
http://www.argeniss.com/research/ARGENISS-ADV-040602.txt
Microsoft Security Bulletin: MS06-017
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-017
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1748
http://securitytracker.com/id?1015895
http://securitytracker.com/id?1015896
http://secunia.com/advisories/19623
http://securityreason.com/securityalert/704
http://www.vupen.com/english/advisories/2006/1322
XForce ISS Database: fpse-html-xss(25537)
https://exchange.xforce.ibmcloud.com/vulnerabilities/25537
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.