Unscored CVE-2012-0144 EUVD-2012-0182GHSA-rg98-gh38-3h9w

Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation…

Published Feb 14, 2012 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."

References

TA12-045A third-party-advisory
oval:org.mitre.oval:def:14386 vdb-entry signature
MS12-011 vendor-advisory