MS03-002: cumulative patch for Microsoft Content Management Server. (Microsoft).(Brief Article)

Information Systems Auditor, March, 2003

Microsoft Content Management Server (MCMS) 2001 is an Enterprise Server product that simplifies developing and managing E-commerce web-sites. MCMS includes a number of pre-defined ASP web pages that allow web-site operators to quickly set up E-business web-sites.

A Cross-Site Scripting flaw exists in one of these ASP pages that could allow attackers to insert script into the data being sent to a MCMS server. Because the server generates a web page in response to users' requests made using this page, it is possible that the script could be embedded within the page that CMS generates and returns to the users; this script would then run when processed by the users' browsers. This could result in attackers being able to access information the users shared with the...

Premium Content Partnership | HighBeam Research provides an in-depth online archive library of reference works. HighBeam Research

 

BNET TalkbackShare your ideas and expertise on this topic

Please add your comment:

  1. You are currently: a Guest |
  2.  

Basic HTML tags that work in comments are: bold (<b></b>), italic (<i></i>), underline (<u></u>), and hyperlink (<a href></a)

advertisement
advertisement
  • Click Here
  • Click Here
  • Click Here
advertisement