Cross-Site Scripting Vulnerability in Microsoft Content Management Server

CVE-2003-0002

Summary

The ManualLogin.asp script in Microsoft Content Management Server 2001 contains a cross-site scripting vulnerability that permits remote attackers to inject and execute arbitrary scripts through the REASONTXT parameter. This flaw can potentially lead to session hijacking, redirection to malicious sites, or unauthorized access to sensitive information, making it crucial for affected users to implement the necessary security patches.

References