CVE-2011-1891 Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML v...
MediumCVSS 4.3
EPSS 16.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft sharepoint foundation | = 2010 | No fix listed |
| Microsoft sharepoint foundation | = 2010-sp1 | No fix listed |
| Microsoft sharepoint services | = 3.0-sp2 | No fix listed |
References
- TA11-256A third-party-advisory us-government-resource
- MS11-074 vendor-advisory
- oval:org.mitre.oval:def:12864 signature vdb-entry