packetstormsecurity.com
http://packetstormsecurity.com/files/154591/Microsoft-SharePoint-2013-SP1-Cross-Site-Scripting.html CVE-2019-1262
MEDIUM
Microsoft SharePoint 2013 SP1 - 'DestinationFolder' Persistant Cross-Site Scripting
Record summary
CVE-2019-1262 has a selected CVSS score of 5.4 (medium); EIP currently links 1 catalogued exploit.
Description
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Microsoft SharePoint FoundationBrowse Microsoft / Microsoft SharePoint Foundation | CVE List | 2013 Service Pack 1 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBMicrosoft SharePoint 2013 SP1 - 'DestinationFolder' Persistant Cross-Site ScriptingExploitDB exploitby Davide CiocciaNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-1262 portal.msrc.microsoft.com
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1262