Vulnerability Database

290,206

Total vulnerabilities in the database

CVE-2007-0938

Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."

  • Published: Apr 10, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-0938
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
microsoft / content_management_server 2001-sp1 2001-sp1.x
microsoft / content_management_server 2002-sp2 2002-sp2.x