Vulnerability Details CVE-2009-3830
The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.739
EPSS Ranking 98.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://support.microsoft.com/kb/976829
- http://www.securityfocus.com/archive/1/507419/100/0/threaded
- http://www.securityfocus.com/bid/36817
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53955
- http://support.microsoft.com/kb/976829
- http://www.securityfocus.com/archive/1/507419/100/0/threaded
- http://www.securityfocus.com/bid/36817
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53955
Products affected by CVE-2009-3830
-
cpe:2.3:a:microsoft:sharepoint_server:2007