CVE-2005-0049

Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.

• http://www.kb.cert.org/vuls/id/340409Patch, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA05-039A.htmlPatch, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19091
• http://www.kb.cert.org/vuls/id/340409Patch, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA05-039A.htmlPatch, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19091

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0040Multiple cross-site scripting (XSS) vulnerabilities in DotNe…
• CVE-2005-0043Buffer overflow in Apple iTunes 4.7 allows remote attackers …
• CVE-2005-0044The OLE component in Windows 98, 2000, XP, and Server 2003, …
• CVE-2005-0045The Server Message Block (SMB) implementation for Windows NT…
• CVE-2005-0047Windows 2000, XP, and Server 2003 does not properly "validat…
• CVE-2005-0048Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Serv…
• CVE-2005-0050The License Logging service for Windows NT Server, Windows 2…
• CVE-2005-0051The Server service (srvsvc.dll) in Windows XP SP1 and SP2 al…
• CVE-2005-0053Internet Explorer 5.01, 5.5, and 6 allows remote attackers t…
• CVE-2005-0054Internet Explorer 5.01, 5.5, and 6 allows remote attackers t…
• CVE-2005-0055Internet Explorer 5.01, 5.5, and 6 does not properly validat…
• CVE-2005-0056Internet Explorer 5.01, 5.5, and 6 does not properly validat…