CVE-2007-0939

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 16.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-10 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."

Affected products

Microsoft Content Management Server: 2001-sp1, 2002-sp2

References

http://secunia.com/advisories/24819
http://www.osvdb.org/34007
http://www.securityfocus.com/archive/1/466331/100/200/threaded
http://www.securityfocus.com/bid/22860
http://www.securitytracker.com/id?1017894
http://www.vupen.com/english/advisories/2007/1322
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-018
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1575
http://secunia.com/advisories/24819
http://www.osvdb.org/34007
http://www.securityfocus.com/archive/1/466331/100/200/threaded
http://www.securityfocus.com/bid/22860

Get alerted when CVE-2007-0939 or the next vulnerability affects your stack