10166 matches found
CVE-2012-1859
CVE-2012-1859 is a cross-site scripting (XSS) vulnerability in SharePoint components: scriptresx.ashx affects SharePoint Server 2010 (Gold/SP1) and Foundation 2010 (Gold/SP1), as well as Office Web Apps 2010. The issue allows remote attackers to inject arbitrary JavaScript/HTML by crafting elemen...
PT-2012-3604
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 versions Gold through SP1 Microsoft SharePoint Foundation 2010 versions Gold through SP1 Microsoft Office Web Apps 2010 versions Gold through SP1 Description A cross-site scripting issue exists, allowing remote...
PT-2012-3602
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 versions Gold through SP1 Microsoft SharePoint Foundation 2010 versions Gold through SP1 Microsoft Office Web Apps 2010 versions Gold through SP1 Description The issue allows remote attackers to inject arbitrar...
Microsoft SharePoint XSS scriptresx.ashx Elevation of Privilege (MS12-050; CVE-2012-1859)
An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint...
MS12-050: Description of the security update for SharePoint Server 2010: July 10, 2012
Describes the security update for SharePoint Server 2010, that was released on July 10, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-050. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
Preemptive Protection against Microsoft SharePoint HTML Sanitization Cross-site Scripting (MS12-050; CVE-2012-1858)
A cross-site scripting vulnerability has been reported in Microsoft SharePoint...
Microsoft SharePoint CVE-2012-1863 Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
Microsoft SharePoint CVE-2012-1862 URI Redirection Vulnerability
Description Microsoft SharePoint is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link,...
Microsoft SharePoint 'scriptresx.ashx' Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
CVE-2012-1861: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script i...
CVE-2012-1860: Undefined Security Weakness
Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service data modificati...
CVE-2012-1859: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka...
Microsoft SharePoint Script in Username Cross-site Scripting (MS12-050; CVE-2012-1861)
An elevation of privilege and cross-site scripting vulnerability has been reported in Microsoft SharePoint...
Microsoft SharePoint Reflected List Parameter XSS (MS12-050; CVE-2012-1863)
An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint...
PT-2012-3605
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2007 versions SP2 through SP3 Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks, via a crafted URL. This could result in spoofing...
PT-2012-3603
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2007 versions SP2 through SP3 SharePoint Server 2010 versions Gold through SP1 Office Web Apps 2010 versions Gold through SP1 Description The issue allows remote authenticated users to obtain sensitive...
MS12-050: Vulnerabilities in SharePoint could allow elevation of privilege: July 10, 2012
Describes vulnerabilities in SharePoint could allow elevation of privilege, and was released on July 10, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-050. To view the complete security bulletin, go to one of the following Microsoft websites: Home...
CVE-2012-1862: Improper Input Validation
Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "SharePoint URL Redirection Vulnerability."...
PT-2012-3606
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2007 versions SP2 through SP3 Windows SharePoint Services 3.0 version SP2 SharePoint Foundation 2010 versions Gold through SP1 Description A cross-site scripting issue exists, allowing remote attackers to...
Microsoft SharePoint CVE-2012-1861 HTML Injection Vulnerability
Description Microsoft SharePoint is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication...