Microsoft SharePoint <= 12.0.0.6421 XSS Vulnerability

Microsoft SharePoint Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: While onl...

SharePoint Server Cross Site Scripting

Hacktics Research Group Security Advisory http://www.hacktics.com/view=Resources%7CAdvisory By Irene Abezgauz, Hacktics. 22-Feb-2010 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, a persistent cross-site scripting vulnerability was identified in the...

Microsoft SharePoint Team Services Information Disclosure Vulnerability

This host is installed with Microsoft SharePoint Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbmssharepointinfodiscvuln.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft SharePoint Team Services Information Disclosure Vulnerability Authors: Nikita MR...

Microsoft SharePoint <= 12.0.0.6219 Team Services Information Disclosure Vulnerability (KB976829)

Microsoft SharePoint Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Code injection

The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to layouts/download.aspx...

CVE-2009-3830

CVE-2009-3830 affects Microsoft SharePoint Server 2007 Team Services (versions 12.0.0.4518 and 12.0.0.6219). The vulnerability arises in the download functionality (_layouts/download.aspx) where pathnames supplied via SourceUrl/Source allow disclosure of ASP.NET source code. Impact is information...

Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege (957175)

This host is missing a critical security update according to Microsoft Bulletin MS08-077. OpenVAS Vulnerability Test $Id: secpodms08-077.nasl 5370 2017-02-20 15:24:26Z cfi $ Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege 957175 Authors: Chandan S Copyright:...

Microsoft Office SharePoint Server管理权限提升漏洞（MS08-077）

BUGTRAQ ID: 32638 CVECAN ID: CVE-2008-4032 SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。 SharePoint Server没有正确地限制对应用的管理部分的访问，远程攻击者可以通过Web浏览器直接访问有漏洞的管理功能绕过某些安全限制，获得权限提升。成功攻击可能会导致拒绝服务或信息泄露 Microsoft Office SharePoint Server 2008 Microsoft Office SharePoint Server 2007 SP1 Microso...

CVE-2008-4032

Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service server load, obtain sensitive information, and "create scripts th...

Authorization

Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service server load, obtain sensitive information, and "create scripts th...

CVE-2008-4032

Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service server load, obtain sensitive information, and "create scripts th...

Microsoft Security Bulletin MS08-077 - Important Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege &#40;957175&#41;

Microsoft Security Bulletin MS08-077 - Important Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege 957175 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability. The...

MS08-077: Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege (957175)

The remote host is running a version of SharePoint Server 2007 that has a privilege elevation vulnerability in the SharePoint site. An attacker may use this to execute scripts in the context of the SharePoint site. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35076...

Microsoft SharePoint Server ViewScopes.aspx Security Bypass (MS08-077; CVE-2008-4032)

Windows SharePoint Services provide a platform for collaboration applications and document management. An elevation of privilege vulnerability was reported in Microsoft Office SharePoint Server 2007. The vulnerability is due to an error in Microsoft Office SharePoint Server that incorrectly handl...

Microsoft SharePoint Server Unauthorized Access Vulnerability

Description Microsoft SharePoint Server is prone to a vulnerability that could let remote attackers gain unauthorized access. A successful exploit will let attackers access certain administrative functions of the SharePoint Server. Technologies Affected Microsoft SharePoint Server 2007 Microsoft...

Microsoft Excel公式解析整数溢出漏洞（MS08-057）

BUGTRAQ ID: 31706 CVECAN ID: CVE-2008-4019 Excel是微软Office办公套件中的电子表格工具。 Excel的REPT函数在处理单元格中的公式时存在整数溢出漏洞。如果用户受骗打开了特意的.xsl文档的话，就可以触发这个溢出，导致执行任意指令。 Microsoft Excel Viewer 2003 SP3 Microsoft Excel Viewer 2003 Microsoft Excel Viewer Microsoft Excel 2007 SP1 Microsoft Excel 2007 Microsoft Excel 2003 SP3...

Microsoft Excel COUNTRY记录内存破坏漏洞（MS08-043）

BUGTRAQ ID: 30640 CVECAN ID: CVE-2008-3006 Excel是Microsoft Office办公软件套件中的电子表格工具。 Excel没有正确地处理BIFF文件格式，在处理文件中的畸形Country（0x8c）记录时可能会触发内存破坏，导致以当前登录用户的权限执行任意指令。 Microsoft Excel Viewer 2003 SP3 Microsoft Excel Viewer 2003 Microsoft Excel Viewer Microsoft Excel 2007 SP1 Microsoft Excel 2007 Microsoft...

Microsoft Excel Record Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft SharePoint Server 2.0 - Picture Source HTML Injection

Microsoft SharePoint Server 2.0 - Picture Source HTML Injection source: https://www.securityfocus.com/bid/28706/info Microsoft SharePoint Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Note that to perform attacks, an attacke...

Microsoft SharePoint Server跨站脚本漏洞（MS07-059）

BUGTRAQ ID: 23832 CVECAN ID: CVE-2007-2581 SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。 Microsoft Windows SharePoint Services 3.0和Microsoft Office SharePoint Server 2007中存在一个跨站脚本执行漏洞，恶意服务器可能利用此漏洞收集客户端系统的有用信息。...