Collected research
A Security Review of SharePoint Site Pages
SharePoint parses customised site pages with CompilationMode.Never so inline code never runs, but where an administrator allows compilation with server-side script still disabled, the namespace value of an import or register directive is copied verbatim into the generated C# and can be closed and reopened to define a class. That yields code execution on the server.
Record
- Researcher
- Soroush Dalili
- Published by
- MDSec
- Date
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Soroush Dalili, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .