HTTP: Microsoft SharePoint Server Callback Function Privilege Escalation

This signature detects attempts to exploit a known vulnerability against Microsoft SharePoint. A successful attack may result in unauthorized privilege escalation.

Extended Description

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."

Affected Products

Microsoft sharepoint_foundation

References

CVE: CVE-2013-0080

Short Name

HTTP:XSS:SHAREPOINT-CALLBACK

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft SharePoint Server Callback Function Privilege Escalation

Extended Description

Affected Products

References

Found a potential security threat?