Executive Summary

Informations
Name	MS05-006	First vendor Publication	N/A
Vendor	Microsoft	Last vendor Modification	N/A
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability in Windows SharePoint Services and SharePoint Team Services Could Allow Cross-Site Scripting and Spoofing Attacks (887981)

CPE : Common Platform Enumeration

Type	Description	Count
Application	Microsoft Sharepoint Portal Server cpe:2.3:a:microsoft:sharepoint_portal_server:2003:*:*:*:*:*:*:* cpe:2.3:a:microsoft:sharepoint_portal_server:2003:sp1:*:*:*:*:*:*	2
Application	Microsoft Sharepoint Team Services cpe:2.3:a:microsoft:sharepoint_team_services:*:*:*:*:*:*:*:*	1

Open Source Vulnerability Database (OSVDB)

Id

Description

13595

Microsoft Windows Sharepoint Services HTML Redirection XSS Windows Sharepoint Services contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate input that is provided to a HTML redirection query before it sends this input to the browser. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.