CVE-2006-0015: Microsoft Frontpage Server Extensions

Medium severity, CVSS 6.8. EPSS: 24.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.

Affected products

• Microsoft Frontpage Server Extensions: version 2002 only
• Microsoft SharePoint Team Services: any version

Published 2006-04-11. Last modified 2026-06-16.