CVE-2007-2581

Description

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2286

https://exchange.xforce.ibmcloud.com/vulnerabilities/34343

https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-2574

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-059

http://www.vupen.com/english/advisories/2007/3439

http://www.us-cert.gov/cas/techalerts/TA07-282A.html

http://www.securityfocus.com/bid/23832

http://www.securityfocus.com/archive/1/482366/100/0/threaded

http://www.securityfocus.com/archive/1/467749/100/0/threaded

http://www.securityfocus.com/archive/1/467738/100/0/threaded

http://securitytracker.com/id?1018789

http://securityreason.com/securityalert/2682

http://secunia.com/advisories/27148

http://osvdb.org/37630

http://archives.neohapsis.com/archives/bugtraq/2007-05/0196.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS