Signature Detail
Short Name |
HTTP:XSS:SHARE-XSS |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft SharePoint Cross Site Scripting |
Release Date |
2007/09/07 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft SharePoint Cross Site Scripting
This signature detects attempts to exploit a known vulnerability against Microsoft SharePoint. Microsoft SharePoint 3.0 and Microsoft Office Sharepoint 2007 are vulnerable. Attackers can potentially inject javascript allowing the attacker to issue commands in the context of the Sharepoint server.
Extended Description
Microsoft SharePoint Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal potentially sensitive information and launch other attacks.
Affected Products
- Microsoft SharePoint Server 2007
- Microsoft SharePoint Server 2007 x64
- Microsoft Windows SharePoint Services 3.0
References