HTTP: FrontPage Server Extensions XSS

This signature detects HTTP POST requests to a Microsoft FrontPage Server containing script elements. A successful attack can lead to information disclosure or execution of arbitrary code.

Extended Description

Microsoft FrontPage Server Extensions are prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before it is rendered to other users. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user, with the privileges of the victim users account. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Affected Products

Microsoft windows_xp_home

References

BugTraq: 17452

CVE: CVE-2006-0015

URL: http://msdn.microsoft.com/library/?url=/library/en-us/dnservext02/fpse2002ovrw.asp

Short Name

HTTP:XSS:FRONTPAGE-EXT

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: FrontPage Server Extensions XSS

Extended Description

Affected Products

References

Found a potential security threat?