Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 30/10/2009 Updated: 10/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote malicious users to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft sharepoint server 2007

======= Summary ======= Name: SharePoint Team Services source code disclosure through download facility Release Date: 21 October 2009 Reference: NGS00532 Discover: Daniel Martin <daniel@ngssoftwarecom> Vendor: Microsoft Systems Affected: SharePoint 2007 (12006219, 12004518 and possibly others) Risk: Medium Status: Reported ======== Ti ...

CWE-20 http://www.securityfocus.com/bid/36817 http://support.microsoft.com/kb/976829 https://exchange.xforce.ibmcloud.com/vulnerabilities/53955 http://www.securityfocus.com/archive/1/507419/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/9967/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-3830

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect