CVE-2007-2581

published 2007-05-09

CVE-2007-2581: Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007…

Priority P4 27 medium 4.3 CVSS 2.0

AV N AC M Au N C N I P A N

EXPLOIT

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
microsoft	sharepoint_server	—	—
microsoft	sharepoint_services	—	—

Detection & IOCs extracted from sources · hover to see the quote

url http://www.example.com/sharepoint/default.aspx/%22);}if(true){alert(%22qwertytis↗

• → XSS payload injected via PATH_INFO (query string) appended to SharePoint pages such as default.aspx; monitor HTTP requests where the path component after .aspx contains URL-encoded script characters (e.g., %22, %7B, %7D, alert) ↗
• → Alert for requests to SharePoint endpoints where the URI path beyond the .aspx filename contains JavaScript syntax patterns such as `if(true){alert(` or closing brace/parenthesis sequences indicative of script injection ↗

• · The vulnerability affects every main SharePoint page, not just default.aspx; any .aspx page in the SharePoint installation may be a viable injection point via PATH_INFO ↗
• · Affected products are Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 AND Office SharePoint Server 2007; both product lines require patching/mitigation ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79