Vulnerability record · CVE-2006-0015 · published 11 April 2006

CVE-2006-0015: Microsoft frontpage server extensions vulnerability

Microsoft · Frontpage Server Extensions

Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.

6.8 CVSS 2.0 Medium EPSS 24% · top 2.2%

6.8CVSS 2.0 base score

24%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

22References, 4 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Frontpage Server Extensions Microsoft

Sharepoint Team Services Microsoft

References

Link	Tags
http://secunia.com/advisories/19623	PatchVendor Advisory
http://securityreason.com/securityalert/704
http://securitytracker.com/id?1015895	Patch
http://securitytracker.com/id?1015896	Patch
http://www.argeniss.com/research/ARGENISS-ADV-040602.txt	ExploitPatchVendor Advisory
http://www.securityfocus.com/archive/1/430803/100/0/threaded
http://www.securityfocus.com/bid/17452	ExploitPatch
http://www.vupen.com/english/advisories/2006/1322
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-017
https://exchange.xforce.ibmcloud.com/vulnerabilities/25537
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1748
http://secunia.com/advisories/19623	PatchVendor Advisory
http://securityreason.com/securityalert/704
http://securitytracker.com/id?1015895	Patch
http://securitytracker.com/id?1015896	Patch
http://www.argeniss.com/research/ARGENISS-ADV-040602.txt	ExploitPatchVendor Advisory
http://www.securityfocus.com/archive/1/430803/100/0/threaded
http://www.securityfocus.com/bid/17452	ExploitPatch
http://www.vupen.com/english/advisories/2006/1322
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-017
https://exchange.xforce.ibmcloud.com/vulnerabilities/25537
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1748

Track CVE-2006-0015 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2003-0822Microsoft FrontPage Server Extensions debug buffer overflowA buffer overflow exists in the debug functionality of fp30reg.dll in Microsoft FrontPage Server Extensions 2000 and 2002. A remote attacker can trig…EPSS 81%analysed15 Dec 2003 7.5CVE-2002-0692Microsoft frontpage server extensions vulnerabilityBuffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a…EPSS 18%10 Oct 2002 7.5CVE-2001-0341Microsoft frontpage server extensions vulnerabilityBuffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary comm…EPSS 28%21 Jul 2001 5.0CVE-2003-0824Microsoft frontpage server extensions vulnerabilityUnknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team …EPSS 35%15 Dec 2003 4.3CVE-2005-0049Microsoft sharepoint portal server vulnerabilityWindows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows r…EPSS 20%2 May 2005

Source: NIST National Vulnerability Database (record CVE-2006-0015), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.