CVE-2003-0002 Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter.
MediumCVSS 6.8
EPSS 23.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft content management server | = 2001 | No fix listed |
| Microsoft content management server | = 2001-sp1 | No fix listed |
References
- 20021007 CSS on Microsoft Content Management Server mailing-list
- mcms-manuallogin-reasontxt-xss (10318) patch vdb-entry vendor-advisory
- 5922 vdb-entry
- MS03-002 vendor-advisory