CSS on Microsoft Content Management Server

Hi, while doing a pen-test I found what seems a Cross Site Scriptting on Microsoft Content Management Server. On M$ words: "Microsoft® Content Management Server 2001 MSCMS is an enterprise Web content management system that enables companies to build, deploy, and maintain Internet, intranet, and...

Microsoft Content Management Server 2001 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/5922/info Microsoft Content Management Server 2001 is reported to be prone to cross-site scripting attacks. An attacker could construct a malicious link to a vulnerable host that contains arbitrary HTML and script code. If this link is visited by a web...

CVE-2002-0700

Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server MCMS 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL...

CVE-2002-0719

SQL injection vulnerability in the function that services for Microsoft Content Management Server MCMS 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files...

CVE-2002-0718

Web authoring command in Microsoft Content Management Server MCMS 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."...

Buffer overflows in Content Managment Server

Multipel buffer overflows...

Security Bulletin MS02-041: Unchecked Buffer in Content Management Server Could Enable Server Compromise (Q326075)

---------------------------------------------------------------------- Title: Unchecked Buffer in Content Management Server Could Enable Server Compromise Q326075 Date: 07 August 2002 Software: Microsoft Content Management Server Impact: Three vulnerabilities, the most serious of which could...

CVE-2002-0396

The web management server for Red-M 1050 Bluetooth Access Point does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session...

Update Rollup 1 for Microsoft System Center 2016 - Orchestrator Management Server (x86) (KB3190603)

Update Rollup 1 for Microsoft System Center 2016 - Orchestrator Management Server x86 KB3190603...

Update Rollup 7 for Microsoft System Center 2016 - Orchestrator Management Server (x86) (KB4496926)

Update Rollup 7 for Microsoft System Center 2016 - Orchestrator Management Server x86 KB4496926...

Update Rollup 6 for Microsoft System Center 2016 - Orchestrator Management Server (x86) (KB4465567)

Update Rollup 6 for Microsoft System Center 2016 - Orchestrator Management Server x86 KB4465567...

Update Rollup 5 for Microsoft System Center 2016 - Orchestrator Management Server (x86) (KB4094928)

Update Rollup 5 for Microsoft System Center 2016 - Orchestrator Management Server x86 KB4094928...

Update Rollup 4 for Microsoft System Center 2016 - Orchestrator Management Server (x86) (KB4047355)

Update Rollup 4 for Microsoft System Center 2016 - Orchestrator Management Server x86 KB4047355...

Update Rollup for Lync Server 2013 Core Management Server (KB3070402)

Update Rollup for Lync Server 2013 Core Management Server KB3070402...

Update Rollup 4 for System Center 2016 Operations Manager

None None...

Microsoft Teams help & learning

None None...

Security update 1970-01-01

...

Detectoid for Skype for Business Server 2015, Core Management Server

Detectoid for Skype for Business Server 2015, Core Management Server...

App-V HWS SKU Installed

Detects whether the App-V Management Server is installed...

Security Update for Microsoft Content Management Server 2002 (KB924429)

This update corrects a security vulnerability in Microsoft Content Management Server 2002 Service Pack 2 that could enable a remote user to execute code on a computer that is running Content Management Server...