Description

Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter.

Remediation

References

CVE-2010-0817

Related Vulnerabilities

WebLogic CVE-2023-22072 Vulnerability (CVE-2023-22072)

WordPress Plugin Cardinity Payment Gateway for WooCommerce Cross-Site Scripting (3.0.6)

Next.js Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-44575)

WordPress Plugin DFD Reddcoin Tips Cross-Site Scripting (1.1.1)

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0795)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2010-0817