Microsoft Sharepoint Server 2007
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:sharepoint_server:2007:*:*:*:*:*:*:*
part: a version: 2007 update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Sharepoint Server (82ce0492-bc52-5489-8888-bb3a55722a58) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-0817 |
vulnerable | 2026-06-08 04:52:04.603508 |
Details available
Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter.
Published: 2010-04-29T21:00:00.000Z
Updated: 2024-08-07T00:59:39.332Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0716 |
vulnerable | 2026-06-08 04:52:04.116726 |
Details available
_layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading TXT files, a related issue to CVE-2008-5026. NOTE: the vendor disputes the significance of this issue, because cross-domain isolation can be implemented when needed.
Published: 2010-02-26T19:00:00.000Z
Updated: 2024-08-07T00:59:39.022Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3830 |
vulnerable | 2026-06-08 04:51:44.401449 |
Details available
The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.
Published: 2009-10-30T20:05:00.000Z
Updated: 2024-08-07T06:38:30.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4033 |
not_vulnerable | 2026-06-08 04:50:37.562305 |
Details available
Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, as demonstrated by the Transfer-Encoding field, aka "MSXML Header Request Vulnerability."
Published: 2008-11-12T23:00:00.000Z
Updated: 2024-08-07T10:00:42.312Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2581 |
vulnerable | 2026-06-08 04:49:45.297889 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.
Published: 2007-05-09T21:00:00.000Z
Updated: 2024-08-07T13:42:33.406Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.