Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows SharePoint联系人详细信息跨站脚本攻击漏洞
Vulnerability Description
SharePoint Server是一个服务器功能集成套件,提供全面的内容管理和企业搜索,加速共享业务流程并简化跨界限信息共享。 Microsoft Windows SharePoint Services 3.0 SP2和SharePoint Foundation 2010 Gold及SP1版本在实现上存在跨站脚本攻击漏洞。远程攻击者可利用联系人详细信息在受影响站点用户浏览器中执行任意脚本代码,控制有效的用户帐户、代表用户执行操作、将用户重定向到恶意网站或者窃取用户凭据。
CVSS Information
N/A
Vulnerability Type
N/A