Directory traversal

Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."...

CVE-2013-0080

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."...

CVE-2013-0084

Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."...

CVE-2013-0085

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service W3WP process crash and site outage via a crafted URL, aka "Buffer Overflow Vulnerability."...

Microsoft Sharepoint multiple security vulnerabilities

Buffer oveflows, directory traversal, crossite scripting, code execution...

CVE-2013-0085

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service W3WP process crash and site outage via a crafted URL, aka "Buffer Overflow Vulnerability."...

CVE-2013-0083

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."...

CVE-2013-0085

CVE-2013-0085 describes a buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 that can be triggered by a crafted URL, leading to a denial of service via a W3WP process crash and site outage. Affected products are SharePoint Server 2010 SP1 and SharePoint Fou...

CVE-2013-0080

CVE-2013-0080 affects Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1. A crafted URL vulnerability (Callback Function Vulnerability) lets remote attackers bypass read restrictions and hijack user accounts by enticing a target user to visit a malicious page. The issue arise...

CVE-2013-0084

Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."...

CVE-2013-0085: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service W3WP process crash and site outage via a crafted URL, aka "Buffer Overflow Vulnerability."...

CVE-2013-0083: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."...

CVE-2013-0080

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."...

PT-2013-2087

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 SP1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via crafted content. This can lead to administrative command execution. Recommendations For...

CVE-2013-0084

CVE-2013-0084 affects Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1. The vulnerability arises from insufficient sanitization of user-supplied URLs, enabling a directory traversal that can bypass content-read restrictions and, per multiple advisories, may allow an attacke...

CVE-2013-0084: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."...

CVE-2013-0080: Undefined Security Weakness

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."...

Microsoft SharePoint Server Privilege Elevation Vulnerabilities (2780176)

This host is missing a critical security update according to Microsoft Bulletin MS13-024. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-0083

CVE-2013-0083 affects Microsoft SharePoint Server 2010 SP1 (and SharePoint Foundation 2010) via a cross-site scripting (XSS) vulnerability in crafted site content that allows an attacker to inject arbitrary script/HTML. This could lead to execution of administrative commands in the context of the...

Microsoft SharePoint CVE-2013-0084 Directory Traversal Vulnerability

Description Microsoft SharePoint is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied data. A remote attacker could exploit this vulnerability using directory-traversal strings such as '../' to obtain sensitive information or elevate their...