![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2010-0817 |
Description: | Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter. |
Test IDs: | 1.3.6.1.4.1.25623.1.0.103254 1.3.6.1.4.1.25623.1.0.902176 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2010-0817 Bugtraq: 20100428 XSS in Microsoft SharePoint Server 2007 (Google Search) http://www.securityfocus.com/archive/1/511021/100/0/threaded Cert/CC Advisory: TA10-159B http://www.us-cert.gov/cas/techalerts/TA10-159B.html http://www.htbridge.ch/advisory/xss_in_microsoft_sharepoint_server_2007.html Microsoft Security Bulletin: MS10-039 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-039 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7468 |