CVE-2006-0015

🗓️ 11 Apr 2006 23:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 61 Views🌐 WEB

XSS vulnerability in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to execute arbitrary code

Reporter	Title	Published	Views	Family All 11
FreeBSD	frontpage -- cross site scripting vulnerability	12 Apr 200600:00	–	freebsd
Check Point Advisories	Update Protection against a Vulnerability in Microsoft FrontPage Server Extensions Vulnerability (MS06-017)	11 Apr 200600:00	–	checkpoint_advisories
Check Point Advisories	Microsoft FrontPage Server Extensions Cross Site Scripting (MS06-017: CVE-2006-0015)	10 Jan 201600:00	–	checkpoint_advisories
Cvelist	CVE-2006-0015	11 Apr 200623:00	–	cvelist
Tenable Nessus	FreeBSD : frontpage -- XSS vulnerability (c0171f59-ea8a-11da-be02-000c6ec775d9)	24 May 200600:00	–	nessus
Tenable Nessus	MS06-017: FrontPage fpadmdll.dll Multiple Parameter XSS (917627)	21 Apr 200600:00	–	nessus
NVD	CVE-2006-0015	11 Apr 200623:02	–	nvd
OpenVAS	FreeBSD Ports: frontpage -- cross site scripting vulnerability	4 Sep 200800:00	–	openvas
OpenVAS	FreeBSD Ports: frontpage -- cross site scripting vulnerability	4 Sep 200800:00	–	openvas
Prion	Cross site scripting	11 Apr 200623:02	–	prion

NVD

Node

Source	Link
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1748
securitytracker	www.securitytracker.com/id
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-017
securitytracker	www.securitytracker.com/id
securityreason	www.securityreason.com/securityalert/704
argeniss	www.argeniss.com/research/ARGENISS-ADV-040602.txt
securityfocus	www.securityfocus.com/archive/1/430803/100/0/threaded
secunia	www.secunia.com/advisories/19623
vupen	www.vupen.com/english/advisories/2006/1322
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/25537

Parameter	Position	Path	Description	CWE
operation	query param	/_vti_bin/_vti_adm/fpadmdll.dll	XSS vulnerability allowing remote injection via parameters passed to fpadmdll.dll (operation, command, name).	CWE-79
command	query param	/_vti_bin/_vti_adm/fpadmdll.dll	XSS vulnerability allowing remote injection via parameters passed to fpadmdll.dll (operation, command, name).	CWE-79
name	query param	/_vti_bin/_vti_adm/fpadmdll.dll	XSS vulnerability allowing remote injection via parameters passed to fpadmdll.dll (operation, command, name).	CWE-79

16 Jun 2026 22:19Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.8

EPSS0.24408