CVE-2007-0938

CVE Database · CVE-2007-0938

CVE-2007-0938

· N/AModified

CVSS v3.1

N/A

EPSS

45.63%

Published

Apr 10, 2007

Modified

Apr 22, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."

Affected Products (2)

microsoft · content_management_servervulnerable

References (20)

http://secunia.com/advisories/24819

http://www.kb.cert.org/vuls/id/434137

US Government Resource

http://www.osvdb.org/34006

http://www.securityfocus.com/archive/1/466331/100/200/threaded

http://www.securityfocus.com/bid/22861

http://www.securitytracker.com/id?1017894

http://www.vupen.com/english/advisories/2007/1322

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-018

https://exchange.xforce.ibmcloud.com/vulnerabilities/32736

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2001

http://secunia.com/advisories/24819

KEV Catalog EPSS Scores Vendors All CVEs