Hack Forums
Sharepoint vuln - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Sharepoint vuln (/showthread.php?tid=5051764)



Sharepoint vuln - Jonnyiscool - Nov 9, 2015

Hey i am running accunetix web vuln scanner on a website and a vulnerability has been found in sharepoint on the webserver, what is the best i can do with this vulnerability?


* - pivoted - Nov 9, 2015

Is the vulnerability in question a 'Blind SQL Injection' which is within the GET param 'dispform.aspx' ?
if so, it's a false positive. Adding any non-integer value to the GET param will make it look like a blind SQLI.


* - Jonnyiscool - Nov 9, 2015

No it just states "Vulnerabilities in sharepoint"


* - pivoted - Nov 10, 2015

(Nov 9, 2015 02:43 PM)Jonnyiscool Wrote:  No it just states "Vulnerabilities in sharepoint"

and it doesn't give you any specific info?


* - Jonnyiscool - Nov 11, 2015

No it just says "Vulnerabilities in sharepoint"