CVE-2012-0144 in SharePoint

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2011-12-13

Divulgación

2012-02-14

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
4635	Microsoft SharePoint themeweb.aspx secuencias de comandos en sitios cruzados	79	No probado	Arreglo oficial	CVE-2012-0144

Fuentes

• MITRE
• NVD
• CVE Details