Microsoft SharePoint Server 2007 XSS Vulnerability

Exploit for windows platform in category web applications ================================================== Microsoft SharePoint Server 2007 XSS Vulnerability ================================================== Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable...

Microsoft SharePoint Server 2007 - Cross-Site Scripting

Vulnerability ID: HTB22350 Reference: http://www.htbridge.ch/advisory/xssinmicrosoftsharepointserver2007.html http://www.microsoft.com/technet/security/advisory/983438.mspx Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable Version: 12.0.0.6421 and Probably Prior...

Microsoft SharePoint Server 2007 Cross Site Scripting

Vulnerability ID: HTB22350 Reference: http://www.htbridge.ch/advisory/xssinmicrosoftsharepointserver2007.html Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable Version: 12.0.0.6421 and Probably Prior Versions Vendor Notification: 12 April 2010 Vulnerability Type:...

Cross-site Scripting Vulnerability in Microsoft SharePoint Server 2007

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Microsoft SharePoint Server 2007 which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting vulnerability in Microsoft SharePoint Server 2007: CVE-2010-0817 An input sanitation error was found ...

Microsoft SharePoint <= 12.0.0.6421 XSS Vulnerability

Microsoft SharePoint Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: While onl...

CVE-2010-0716

layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and...

CVE-2010-0716

layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and...

Hacktics Advisory Feb10: Persistent XSS in Microsoft SharePoint Portal

Hacktics Research Group Security Advisory http://www.hacktics.com/view=Resources7CAdvisory By Irene Abezgauz, Hacktics. 22-Feb-2010 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, a persistent cross-site scripting vulnerability was identified in the...

Microsoft SharePoint <= 12.0.0.6219 Team Services Information Disclosure Vulnerability (KB976829)

Microsoft SharePoint Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint团队协作服务下载功能源代码信息泄漏漏洞

Bugraq ID: 36817 Microsoft SharePoint Server是一款服务器功能集成套件，提供全面的内容管理和企业搜索、加速共享业务流程并便利跨界限信息共享。 Microsoft SharePoint团队协作服务Team Services的下载功能存在漏洞，可导致泄漏ASP.NET文件源代码。 SharePoint Team Services存储各种文件到它的后端数据库中，这些文件包含站点模板，定制ASP.NET页和用于上传到文档库的应用脚本。...

McAfee Products Security Bypass Vulnerability (Windows)

This host is installed with McAfee products and are prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmcafeeprdtssecbypassvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ McAfee Products Security Bypass Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2009...

Microsoft SharePoint Server Detection

The remote web server is running SharePoint, a web interface for document management. As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38157;...

Microsoft Sharepoint unauthorized access

It's possible to access administration page without authentication...

Microsoft SharePoint Server ViewScopes.aspx Security Bypass (MS08-077; CVE-2008-4032)

Windows SharePoint Services provide a platform for collaboration applications and document management. An elevation of privilege vulnerability was reported in Microsoft Office SharePoint Server 2007. The vulnerability is due to an error in Microsoft Office SharePoint Server that incorrectly handl...

Microsoft SharePoint Server Unauthorized Access Vulnerability

Description Microsoft SharePoint Server is prone to a vulnerability that could let remote attackers gain unauthorized access. A successful exploit will let attackers access certain administrative functions of the SharePoint Server. Technologies Affected Microsoft SharePoint Server 2007 Microsoft...

CVE-2008-5026

Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting XSS attacks by uploading HTML...

Cross site scripting

Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting XSS attacks by uploading HTML...

CVE-2008-5026

Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting XSS attacks by uploading HTML...

CAU-2008-0002: Microsoft Windows SharePoint Services Picture Source XSS

/ / | | | | ----====/ // / | || |====---- | | | || | | | | | | | | | | | | | ------====== / /| || || || |======------ / || || / Computer Academic Underground http://www.caughq.org Security Advisory ===============/======================================================== Advisory ID: CAU-2008-0002...

Microsoft SharePoint Server 2.0 - Picture Source HTML Injection

Microsoft SharePoint Server 2.0 - Picture Source HTML Injection source: https://www.securityfocus.com/bid/28706/info Microsoft SharePoint Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Note that to perform attacks, an attacke...