Description
Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app that executes a custom action in the context of the SharePoint extensibility model, aka "SharePoint Page Content Vulnerability."
Remediation
References
Related Vulnerabilities
WordPress Plugin uContext for Amazon Cross-Site Request Forgery (3.9.1)
Serendipity Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5476)
PHP Use of Uninitialized Resource Vulnerability (CVE-2019-11038)
Internet Information Services Other Vulnerability (CVE-2000-0630)
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-3278)