Le Nguyen Khang

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

An issue exists where execution with unnecessary privileges allows an authorized attacker to elevate their privileges over a network, potentially affecting the system.

Improper authorization allows an authorized attacker to elevate privileges over a network, which enables them to affect the system.

Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, manipulating the database backend.

Improper control of code generation leads to a code injection issue, allowing an authorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, manipulating the database backend.

Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, manipulating the database.

Improper neutralization of special elements used in an SQL command leads to an SQL injection, which allows an authorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges locally. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, manipulating the database backend.

Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, manipulating the database backend.

Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, manipulating the database backend.

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.