sparty

Sparty - Sharepoint/Frontpage Auditing Tool ! Authored by: Aditya K Sood |[email protected] | 2013 Twitter: @AdityaKSood Powered by: SecNiche Security Labs ! Sparty is an open source tool written in python to audit web applications using sharepoint and frontpage architecture. The motivation...

Microsoft FrontPage Extensions - Information Disclosure

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...

frontpage-server-extensions-vulnerability-scanner

Frontpage Server Extensions Vulnerability Scanner This Python script automates the process of scanning for the CVE-2000-0114 vulnerability in Microsoft Frontpage Server Extensions. It's designed to help security professionals and system administrators identify potentially vulnerable subdomains...

CVE-2026-108338

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...

CVE-2026-108338

Apache Roller versions 5.0.1 through 6.1.6 are vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation, where the tag filter allows HTML characters in tag names. Specifically, the bundled gaurav , fauxcoly ...

EUVD-2026-123503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...

CVE-2026-108338

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...

CVE-2026-108338 Apache Roller: Stored cross-site scripting through AtomPub entry tags

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...

CVE-2026-108338 Apache Roller: Stored cross-site scripting through AtomPub entry tags

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...

PT-2026-145175

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...

CVE-2026-108338: Apache Software Foundation Apache Roller: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 5.0.1 through…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...

CVE-2026-82383

Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persistently change a site-global configuration value the frontpage weblog selection on any installed instance, because the setup action remains anonymously reachable after installatio...

CVE-2026-82382

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the...

CVE-2026-82382

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the...

CVE-2026-82382 Apache Roller: Reflected cross-site scripting in the frontpage directory parameter

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the...

CVE-2026-82382 Apache Roller: Reflected cross-site scripting in the frontpage directory parameter

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the...

CVE-2026-82382 Apache Roller: Reflected cross-site scripting in the frontpage directory parameter

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the...

EUVD-2026-88139

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the...

CVE-2026-82382

Apache Roller version 6.1.5 is vulnerable to reflected cross-site scripting (XSS) due to improper neutralization of input during web page generation. The vulnerability specifically affects weblogs utilizing the bundled frontpage theme , where the application reflects the blog-directory parameter ...

CVE-2026-82383

Apache Roller version 6.1.5 is vulnerable to a missing authentication flaw in a critical function. An unauthenticated remote attacker can persistently change site-global configuration values, specifically the frontpage weblog selection , because the setup action remains anonymously reachable afte...