CVE-2005-0049 | BDVDB-2026-7959 Detail

Description#

Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/19091
http://www.kb.cert.org/vuls/id/340409
http://www.us-cert.gov/cas/techalerts/TA05-039A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006

Exploit#

No public exploit known

History#

Version 12005-02-08Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.