Description

Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."

Remediation

References

CVE-2012-0145

Related Vulnerabilities

Ruby Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2017-17790)

PostgreSQL Out-of-bounds Read Vulnerability (CVE-2019-10129)

Apache HTTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-41773)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1155)

Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-0189)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-0145