CVE-2005-0049 in SharePoint Team Services

Sumário (Inglês)

Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

11/01/2005

Divulgação

02/05/2005

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
24284	Microsoft SharePoint Team Services Script de Site Cruzado	80	Não definido	Não definido	CVE-2005-0049

Fontes

• MITRE
• NVD
• CVE Details