SERVER-WEBAPP Microsoft Office SharePoint cross site scripting attempt
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.
CVSS base score 4.3
CVSS impact score 2.9
CVSS exploitability score 8.6
- microsoft sharepoint_server 2007
- microsoft sharepoint_services 3.0
- microsoft windows_2003 *
Ease of attack
Upgrade to the latest non-affected version of the software.
Apply the appropriate vendor supplied patches.
- Talos research team.
- This document was generated from data supplied by the national vulnerability database, a product of the national institute of standards and technology.
- For more information see nvd.