CVE-2012-0145

CVE-2012-0145 is an XSS vulnerability in wizardlist.aspx affecting Microsoft SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary script/HTML via JavaScript sequences in a URL, per the description of the vulnerability. Publ...

CVE-2012-0144

CVE-2012-0144 is an XSS vulnerability in themeweb.aspx affecting Microsoft SharePoint products: SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL. OpenVAS/Nessus entri...

CVE-2012-0017

Cross-site scripting XSS vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."...

CVE-2012-0145

Cross-site scripting XSS vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability...

CVE-2012-0017

CVE-2012-0017 is an XSS in Microsoft SharePoint Foundation 2010 Gold/SP1 via inplview.aspx. The underlying issue is improper handling of JavaScript sequences in a URL, allowing remote attackers to inject arbitrary script/HTML. Affected product/version: SharePoint Foundation 2010 (Gold/SP1). Docum...

Microsoft SharePoint 'inplview.aspx' Cross Site Scripting Vulnerability

Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

Microsoft SharePoint themeweb.aspx Cross-Site Scripting (MS12-011; CVE-2012-0144)

A cross-site scripting vulnerability has been reported in Microsoft SharePoint...

Microsoft SharePoint inplview.aspx Cross-Site Scripting (MS12-011; CVE-2012-0017)

A cross-site scripting vulnerability has been reported in Microsoft SharePoint...

MS12-011 : Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2663841)

The version of SharePoint Foundation or SharePoint Server installed on the remote host has multiple privilege escalation and information disclosure vulnerabilities. A remote attacker could exploit them by tricking a user into making a malicious request, resulting in arbitrary script code executio...

Microsoft SharePoint wizardlist.aspx Cross-Site Scripting (MS12-011; CVE-2012-0145)

A cross-site scripting vulnerability has been reported in Microsoft SharePoint...

Microsoft SharePoint 'themeweb.aspx' Cross Site Scripting Vulnerability

Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

Microsoft SharePoint 'wizardlist.aspx' Cross Site Scripting Vulnerability

Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

MS12-011: Vulnerabilities in Microsoft SharePoint could allow elevation of privilege: February 14, 2012

Describes the bulletin that resolves vulnerabilities in Microsoft SharePoint could allow information disclosure that was released on February 14, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-011. To view the complete security bulletin, visit one of the following Microsoft...

Microsoft SharePoint Office Document Load Balancer SOAP Vulnerability

Added: 11/23/2011 CVE: CVE-2010-3964 BID: 45264 OSVDB: 69817 Background Microsoft SharePoint is a web application platform that provides web content management and document management as an aid to collaboration among users. SharePoint's multi-purpose design allows for managing and provisioning of...

Microsoft SharePoint Office Document Load Balancer SOAP Vulnerability

Added: 11/23/2011 CVE: CVE-2010-3964 BID: 45264 OSVDB: 69817 Background Microsoft SharePoint is a web application platform that provides web content management and document management as an aid to collaboration among users. SharePoint's multi-purpose design allows for managing and provisioning of...

Microsoft SharePoint Office Document Load Balancer SOAP Vulnerability

Added: 11/23/2011 CVE: CVE-2010-3964 BID: 45264 OSVDB: 69817 Background Microsoft SharePoint is a web application platform that provides web content management and document management as an aid to collaboration among users. SharePoint's multi-purpose design allows for managing and provisioning of...

Microsoft SharePoint Office Document Load Balancer SOAP Vulnerability

Added: 11/23/2011 CVE: CVE-2010-3964 BID: 45264 OSVDB: 69817 Background Microsoft SharePoint is a web application platform that provides web content management and document management as an aid to collaboration among users. SharePoint's multi-purpose design allows for managing and provisioning of...

Microsoft SharePoint联系方式跨站脚本漏洞(CVE-2011-1891)

Bugtraq ID: 49005 CVE ID：CVE-2011-1891 Microsoft SharePoint Server是一款服务器功能集成套件，提供全面的内容管理和企业搜索、加速共享业务流程并便利跨界限信息共享。 通过联系方式传递的输入在返回用户之前缺少过滤，可导致跨站脚本攻击，允许攻击者通过合法用户账户执行恶意操作，如重定向用户到恶意站点或窃取用户敏感信息。 Microsoft SharePoint Services 64-bit 3.0 SP2 Microsoft SharePoint Services 3.0 SP2 Microsoft SharePoint...

Microsoft SharePoint XML处理远程文件泄露漏洞

Bugtraq ID: 49511 CVE ID：CVE-2011-1892 Microsoft SharePoint Server是一款服务器功能集成套件，提供全面的内容管理和企业搜索、加速共享业务流程并便利跨界限信息共享。 Microsoft SharePoint存在文件泄露漏洞，允许恶意验证用户使用特制XML文件，以运行Sharepoint账户上下文读取SharePoint服务器上的本地文件。 Microsoft SharePoint Workspace 2010 SP1 Microsoft SharePoint Workspace 2010 0 Microsoft...

Microsoft SharePoint SafeHTML Information Disclosure Vulnerabilities (2412048)

This host is missing an important security update according to Microsoft Bulletin MS10-072. OpenVAS Vulnerability Test $Id: secpodms10-072.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft SharePoint SafeHTML Information Disclosure Vulnerabilities 2412048 Authors: Rachana Shetty Copyright: Copyright...