8615 matches found
CVE-2005-0049
The CVE-2005-0049 issue affects Windows SharePoint Services for Windows Server 2003 and SharePoint Team Services, arising from insufficient validation of input to an HTTP redirection query. The underlying cause is improper handling of redirection query data, enabling remote attackers to inject ar...
Microsoft Windows SharePoint Services Cross-Site Scripting and Spoofing Vulnerability
Description A cross-site scripting and spoofing vulnerability affects Microsoft Windows SharePoint Services and SharePoint Team Services. A remote attacker may carry out a cross-site scripting attack to execute arbitrary HTML and script code in a user's browser. It is also possible to poison Web...
Microsoft Security Bulletin MS05-006
Microsoft Security Bulletin MS05-006 Vulnerability in Windows SharePoint Services and SharePoint Team Services Could Allow Cross-Site Scripting and Spoofing Attacks 887981 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows SharePoint...
SharePoint information leak
During installation text file with cleartext password is created in world readable folder...
Sharepoint 2003 installation fails and account password revealed in setup log
System tested/affected: WSS, SharePoint 2003 - Hebrew localized version Details: I have a domain user account which has a complex password, including a leading dash -. After installing SPS components which includes WSS, I was prompted to enter database access account, at which point I entered the...
Microsoft SharePoint Detection
Binary data 5047.prm...
CVE-2004-0379
Multiple cross-site scripting XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts...
CVE-2004-0379
Multiple cross-site scripting XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts...
CVE-2004-0379
CVE-2004-0379 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001. The affected component is three scripts within SharePoint Portal Server 2001, where XSS could allow remote attackers to process arbitrary web content and steal cookies via ...
Microsoft SharePoint Portal Server 2001 (crossite scripting)
Multiple crossite scripting bugs...
Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001
-- Security Advisory -- Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 -- Author: Ory Segal , Sanctum inc. http://www.SanctumInc.com -- Release Date: April 5th. 2004 -- Product: Microsoft SharePoint Portal Server 2001 -- Severity: High -- CVE: CAN-2004-0379 -- Description...
CVE-2003-0904
Summary: CVE-2003-0904 affects Microsoft Exchange Server 2003 with Outlook Web Access (OWA) when NTLM is used. A flaw in HTTP connection reuse between front-end and back-end servers (NTLM-authenticated OWA) can cause a user to be connected to another user’s mailbox if Kerberos is disabled or fall...
CVE-2003-0824
Unknown vulnerability in the SmartHTML interpreter shtml.dll in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service response failure via a certain request...
SharePoint administration interface unauthorized access
Page with authentication request contains private information...
Microsoft SharePoint Portal and Team Services
There is a bug in how the authentication mode works with the web-based administration page. This page resides, in the Web Servers with Sharepoint, in http://www.example.com/layouts/settings.htm or http://www.example.com/somedirectory/layouts/settings.htm This page is usually protected by NT Basic...
CVE-2003-0824
Microsoft FrontPage Server Extensions (FPSE) 2000/2002 and SharePoint Team Services 2002 are affected by two vulnerabilities described in MS03-051. The first is a remote denial-of-service in the remote debugging function of FPSE (buffer overrun in the fp30reg.dll/remote debug path) that could tem...
Update for Microsoft SharePoint Server 2010 (KB2883004)
Update for Microsoft SharePoint Server 2010 KB2883004...
Update for Microsoft SharePoint Server 2010 (KB2899589)
Update for Microsoft SharePoint Server 2010 KB2899589...