Description

Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."

Remediation

References

CVE-2013-3895

Related Vulnerabilities

WordPress Plugin RestroPress-Online Food Ordering System Cross-Site Request Forgery (2.8.2)

WordPress Plugin Responsive Products Showcase Listing for WordPress-WP Product Gallery Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.1)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3325)

WordPress Plugin Google Drive for WordPress Information Disclosure (2.2)

WordPress Plugin Video Gallery-Best WordPress YouTube Gallery Multiple Vulnerabilities (1.7.6)

Severity

Medium

Classification

CVE-2013-3895 CWE-264

Tags

Missing Update Known Vulnerabilities