NVD

Id
54745  
Name
CVE-2007-2581  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-05-09  
Modified Date
2012-10-30  
Seq
2007-2581  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277884 54745 CVE-2007-2581 20070513 Re: XSS in Microsoft SharePoint  View
277885 54745 CVE-2007-2581 oval:org.mitre.oval:def:2286  View
277886 54745 CVE-2007-2581 2682  View
277887 54745 CVE-2007-2581 1018789  View
277888 54745 CVE-2007-2581 MS07-059  View
277889 54745 CVE-2007-2581 20070504 XSS in Microsoft SharePoint  View
277890 54745 CVE-2007-2581 20070505 RE: XSS in Microsoft SharePoint  View
277891 54745 CVE-2007-2581 HPSBST02280  View
277892 54745 CVE-2007-2581 23832  View
277893 54745 CVE-2007-2581 TA07-282A  View
277894 54745 CVE-2007-2581 ADV-2007-3439  View
277895 54745 CVE-2007-2581 sharepoint-default-pathinfo-xss(34343)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52099 JVNDB-2007-000762 Windows SharePoint Services および Office SharePoint Server における複数のクロスサイトスクリプティングの脆弱性 Windows SharePoint Services および Office SharePoint Server には、エンコードされたリクエストのスクリプト文字列のチェックに不備が存在するために、複数のクロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-2581 25936 CVE-2007-2581 54745 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000762.html 2007-05-09 2007-10-19 View