Detections
Analytics
MS10-072: Vulnerabilities in SafeHTML Could Allow Information Disclosure (2412048) (remote check)
medium Nessus Plugin ID 49999
Language:
Synopsis
The remote host is affected by multiple cross-site scripting vulnerabilities.Description
The version of SharePoint Services, SharePoint Server installed on the remote host has multiple cross-site scripting vulnerabilities.A remote attacker could exploit them by tricking a user into making a malicious request, resulting in arbitrary script code execution.
Solution
Microsoft has released a set of patches for SharePoint Services 3.0 and SharePoint Server 2007.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2010/ms10-072
Plugin Details
Severity: Medium
ID: 49999
File Name: safehtml_ms10_072.nasl
Version: 1.26
Type: remote
Family: CGI abuses : XSS
Published: 10/18/2010
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.8
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.4
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:microsoft:sharepoint_services, cpe:/a:microsoft:sharepoint_foundation, cpe:/a:microsoft:sharepoint_server
Required KB Items: www/ASP, www/sharepoint
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Patch Publication Date: 10/12/2010
Vulnerability Publication Date: 10/12/2010
Reference Information
CVE: CVE-2010-3243, CVE-2010-3324