Published: 29/04/2010 Updated: 12/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote malicious users to inject arbitrary web script or HTML via the cid0 parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft sharepoint server 2007
microsoft sharepoint services 3.0

Vulnerability ID: HTB22350 Reference: wwwhtbridgech/advisory/xss_in_microsoft_sharepoint_server_2007html wwwmicrosoftcom/technet/security/advisory/983438mspx Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable Version: 12006421 and Probably Prior Versions Vendor Notification: 12 April 2010 V ...

CWE-79 http://www.htbridge.ch/advisory/xss_in_microsoft_sharepoint_server_2007.html http://www.us-cert.gov/cas/techalerts/TA10-159B.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7468 http://www.securityfocus.com/archive/1/511021/100/0/threaded https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-039 https://nvd.nist.gov https://www.exploit-db.com/exploits/12450/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-0817

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect