This host is running Microsoft SharePoint Server and is prone to Cross Site Scripting vulnerability.

Successful exploitation will allow remote authenticated users to compromise the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data. Impact Level: Application

Apply the patch from below link http://technet.microsoft.com/en-us/security/bulletin/MS10-039

This flaw is due to insufficient validation of user supplied data passed into 'cid0' parameter in the '_layouts/help.aspx' in SharePoint Team Services.

Microsoft Windows SharePoint Services 3.0 SP 1 Microsoft Office SharePoint Server SP1 2007 12.0.0.6421 and prior.

• http://www.htbridge.ch/advisory/xss_in_microsoft_sharepoint_server_2007.html
• http://www.microsoft.com/technet/security/advisory/983438.mspx
• http://www.securityfocus.com/archive/1/archive/1/509683/100/0/threaded

---

Updated on 2015-03-25