CVE-2007-0939

CVE Database · CVE-2007-0939

CVE-2007-0939

· N/AModified

CVSS v3.1

N/A

EPSS

16.19%

Published

Apr 10, 2007

Modified

Apr 22, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."

Affected Products (2)

microsoft · content_management_servervulnerable

References (16)

http://secunia.com/advisories/24819

http://www.osvdb.org/34007

http://www.securityfocus.com/archive/1/466331/100/200/threaded

http://www.securityfocus.com/bid/22860

http://www.securitytracker.com/id?1017894

http://www.vupen.com/english/advisories/2007/1322

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-018

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1575

http://secunia.com/advisories/24819

http://www.osvdb.org/34007

http://www.securityfocus.com/archive/1/466331/100/200/threaded

http://www.securityfocus.com/bid/22860

KEV Catalog EPSS Scores Vendors All CVEs